Catch Exposed Secrets Before They Become Breaches
A developer commits an API key by accident. GitHub detects it, but if you don't check regularly, your secrets stay exposed. Get a Telegram alert the instant a secret is detected so you can revoke access immediately.
Trigger
New Secret Scanning Alert Detected
Triggers when a new secret scanning alert is detected in a GitHub repository. Monitors open secret scanning alerts and fires an event for each newly detected alert. Supports filtering by secret type (e.g., personal access tokens, AWS keys) and by token validity status (active, inactive, unknown). The payload includes the alert number, secret type, validity status, resolution state, timestamps, URLs, and flags for push protection bypass, public exposure, and multi-repo detection.
Action
Send Message
Send a text message to a telegram chat using the bot api.
Why this helps
A production API key gets accidentally committed. It stays in the repo for 12 hours before anyone notices. By then the key could have been discovered by a bot. You're scrambling to rotate credentials at midnight.
- Respond to secret exposures in minutes instead of hours
- Prevent actual credential leaks by rotating fast
- Reduce security incident response time by 10x
Setup
Build it in a few focused steps.
- 1Connect GitHub and Telegram to Notis.
- 2Ask Notis: 'Send me an urgent alert in Telegram if a secret is detected in our repository', or create in the portal.
- 3Select 'New Secret Scanning Alert Detected' as the trigger.
- 4Choose a Telegram channel for critical security alerts.
- 5Test by having the detection system or manually triggering a test alert and confirming it arrives.
Questions about this workflow
What types of secrets does GitHub detect?
GitHub detects API keys, AWS credentials, OAuth tokens, private keys, and many other credential types.
Can I filter by secret type?
Yes. Tell Notis to only alert on production credentials if you want to reduce noise from test keys.
How do I know what to do when I get an alert?
Notis includes the secret type and location in the message, plus a link to the GitHub alert for full details on remediation steps.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link GitHub to Telegram. A trigger fires from one place; an action lands in another.
GitHub triggers
Telegram actions
New Workflow Artifact Created
Triggers when a new workflow artifact is created in a GitHub repository. Monitors for newly created GitHub Actions workflow artifacts. Optionally filters by artifact name to restrict monitoring to specific artifacts.
Answer Callback Query
Use this method to send answers to callback queries sent from inline keyboards. the answer will be displayed to the user as a notification at the top of the chat screen or as an alert.
Branch Changed
Triggers when a GitHub branch changes. Monitors a specific branch for: - New commits pushed (head commit SHA changes) - Protection status toggled (branch becomes protected or unprotected) - Protection settings changed, including: required status checks and their enforcement level, admin enforcement, required pull request reviews (dismiss stale reviews, code owner reviews, approving review count, last push approval), required linear history, force push allowance, deletion allowance, conversation resolution, branch locking, and fork syncing.
Delete Message
Delete a message, including service messages, with certain limitations.
New Branch Created
Triggers when a new branch is created in a GitHub repository. Detects newly created branches. Deleted branches do not fire events.
Edit Message
Edit text messages sent by the bot.
Check Run Status / Conclusion Changed
Triggers when a specific GitHub check run changes its status or conclusion. Monitors a single check run for changes to: status (queued, in_progress, completed, etc.), conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required), started_at, and completed_at.
Export Chat Invite Link
Generate a new primary invite link for a chat; any previously generated primary link is revoked. the bot must be an administrator in the chat for this to work and must have the appropriate administrator rights.
Check Suite Status / Conclusion Changed
Triggers when a GitHub check suite changes its status or conclusion for a given ref. Monitors all check suites associated with a git reference (branch, tag, or commit SHA) for changes to status (queued, in_progress, completed, etc.) and conclusion (success, failure, neutral, cancelled, skipped, timed_out, action_required, startup_failure, stale). Optionally filters by GitHub App ID.
Forward Message
Forward messages of any kind. service messages can't be forwarded.
New Code Scanning Alert Created
Triggers when a new code scanning alert is created in a repository. Fires an event for each newly created code scanning alert detected in the configured repository. Alerts can be filtered by Git reference, scanning tool, state, and severity. The payload includes the alert number, rule details, tool information, state, severity, and the location of the most recent instance.
Get Chat Info
Get up to date information about the chat (current name of the user for one-on-one conversations, current username of a user, group or channel, etc.).
New Repository Collaborator Added
Triggers when a new collaborator is added to a GitHub repository. Monitors the full list of collaborators on a repository and fires an event for each newly added collaborator. The payload includes the collaborator's GitHub username, account ID, profile URL, avatar URL, permission flags (pull, triage, push, maintain, admin), and assigned role name.
Get Chat Administrators
Get a list of administrators in a chat. on success, returns an array of chatmember objects that contains information about all chat administrators except other bots.
Commit Event
Triggered when a new commit is pushed to a repository.
Get Chat History
Get chat history messages. note: this uses the getupdates method with specific parameters to retrieve historical messages.
Connect any two apps with Notis in the middle.
Not just GitHub and Telegram. Any combination from 985+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7 days free trial with 20$ free usage included.
No card. Works with personal or business Telegram.