GitHub Code Scanning Alert to Asana Task
Security vulnerabilities found by GitHub's code scanner instantly become high-priority Asana tasks. Your team moves on fixes before the alert gets buried.
Trigger
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository. Fires an event for each newly created code scanning alert detected in the configured repository. Alerts can be filtered by Git reference, scanning tool, state, and severity. The payload includes the alert number, rule details, tool information, state, severity, and the location of the most recent instance.
Action
Create task in asana with specific details
Creates a new asana task; requires 'workspace', 'parent', or 'projects' for association, and 'followers', 'projects', 'tags' are set only at creation.
Why this helps
Code scanning alerts pile up in GitHub, but your team doesn't see them because they're not in the Asana board. Security work gets deprioritized, vulnerabilities linger, and nobody owns the fix.
- Security alerts get immediate visibility in Asana
- Team stays on top of vulnerabilities
- No missed security work due to tool fragmentation
- Clear ownership and deadlines for fixes
Setup
Build it in a few focused steps.
- 1Set up GitHub and Asana integrations in Notis.
- 2Create automation: 'Code Scanning Alerts to Tasks'. Prompt: 'For each new code scanning alert, create a high-priority Asana task with the vulnerability details, severity, and fix link'.
- 3Select 'New Code Scanning Alert Created' as your trigger.
- 4Test by triggering a code scan that detects an issue, then verify the Asana task appears with priority set.
Questions about this workflow
How do I prioritize alerts by severity?
Tell Notis to set Asana priority based on severity: 'High and critical alerts get priority 1, medium get priority 2, etc.'
Can I auto-assign alerts to specific team members?
Yes. Set up routing by alert type: 'Assign authentication vulnerabilities to the security team, database issues to backend.'
What happens after we fix a vulnerability?
When the alert is resolved in GitHub, Notis can auto-mark the Asana task complete.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link GitHub to Asana. A trigger fires from one place; an action lands in another.
GitHub triggers
Asana actions
New Workflow Artifact Created
Triggers when a new workflow artifact is created in a GitHub repository. Monitors for newly created GitHub Actions workflow artifacts. Optionally filters by artifact name to restrict monitoring to specific artifacts.
Add Followers to Task
Tool to add followers to a task in asana. use this tool when you need to add one or more users as followers to a specific task. this will notify them of updates to the task.
Branch Changed
Triggers when a GitHub branch changes. Monitors a specific branch for: - New commits pushed (head commit SHA changes) - Protection status toggled (branch becomes protected or unprotected) - Protection settings changed, including: required status checks and their enforcement level, admin enforcement, required pull request reviews (dismiss stale reviews, code owner reviews, approving review count, last push approval), required linear history, force push allowance, deletion allowance, conversation resolution, branch locking, and fork syncing.
Add Supporting Relationship to Goal
Tool to add a supporting goal relationship to a goal. use when you want to link a project, task, portfolio, or another goal as a supporting resource to a specific goal in asana.
New Branch Created
Triggers when a new branch is created in a GitHub repository. Detects newly created branches. Deleted branches do not fire events.
Add task to section
Adds an existing task to a section, optionally positioning it before or after another task in that section; if no position is specified, the task is added to the end.
Check Run Status / Conclusion Changed
Triggers when a specific GitHub check run changes its status or conclusion. Monitors a single check run for changes to: status (queued, in_progress, completed, etc.), conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required), started_at, and completed_at.
Create Allocation
Creates a new allocation. use when you need to schedule or assign a specific amount of a user's time per week to a task or project within a defined period.
Check Suite Status / Conclusion Changed
Triggers when a GitHub check suite changes its status or conclusion for a given ref. Monitors all check suites associated with a git reference (branch, tag, or commit SHA) for changes to status (queued, in_progress, completed, etc.) and conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required, startup_failure, stale). Optionally filters by GitHub App ID.
Create a project
Creates a new asana project, requiring either a `workspace` or `team` gid for association, and returns the full project details.
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository. Fires an event for each newly created code scanning alert detected in the configured repository. Alerts can be filtered by Git reference, scanning tool, state, and severity. The payload includes the alert number, rule details, tool information, state, severity, and the location of the most recent instance.
Create a tag in a workspace
Creates a new tag, with properties like name and color defined in the request body, within a specific asana workspace (using `workspace gid`); this tag helps categorize tasks, is confined to the workspace, and is not automatically applied to tasks.
New Repository Collaborator Added
Triggers when a new collaborator is added to a GitHub repository. Monitors the full list of collaborators on a repository and fires an event for each newly added collaborator. The payload includes the collaborator's GitHub username, account ID, profile URL, avatar URL, permission flags (pull, triage, push, maintain, admin), and assigned role name.
Create task in asana with specific details
Creates a new asana task; requires 'workspace', 'parent', or 'projects' for association, and 'followers', 'projects', 'tags' are set only at creation.
Commit Event
Triggered when a new commit is pushed to a repository.
Create Attachment for Task
Tool to upload an attachment to a task. use when you need to attach a file to a specific task in asana.
Connect any two apps with Notis in the middle.
Not just GitHub and Asana. Any combination from 985+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7 days free trial with 20$ free usage included.
No card. Works with personal or business Asana.