Templates / Scan code repositories for governance issues with GPT-4o and severity-based reports

Scan code repositories for governance issues with GPT-4o and severity-based reports

Ready for 3.0

by Cheng Siong Chin ✓ · 118 views · created 2026-03-05 · DevOps, AI Summarization

Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.

What this workflow does

This AI workflow has 23 nodes and runs manually, when you click “Execute workflow”. Along the way it connects OpenAI Chat Model.

How it runs

Trigger: Manually, when you click “Execute workflow”.

  1. Extract Repository Metadata (SSH): uses SSH
  2. Governance Orchestrator Agent (AI Agent): runs an AI agent, with model: Orchestrator Model; 4 tools (Static Code Analysis Agent, CTO Report Generation Agent, Architectural Compliance Agent, Security Vulnerability Scanner Agent); output parser: Structured Governance Output
  3. Format Final Report (Edit Fields (Set)): sets 3 fields: reportGeneratedAt, repositoryScanned, governanceReport
  4. Check Critical Issues Threshold (If): checks a condition and branches into true / false
  5. Prepare Escalation Alert (Edit Fields (Set)): sets 5 fields: alertType, criticalIssuesCount, escalationRequired…
  6. Log Standard Report (Edit Fields (Set)): sets 3 fields: reportStatus, loggedAt, summary
  7. Route by Severity Level (Switch): routes items into 2 branches
  8. Merge: merges the data from its input branches
  9. Critical Severity Handler (Edit Fields (Set)): sets 4 fields: severityLevel, actionRequired, notificationPriority…
  10. Medium Severity Handler (Edit Fields (Set)): sets 4 fields: severityLevel, actionRequired, notificationPriority…

…plus 2 more steps. See the full node list below.

Services it uses

OpenAI Chat Model

Before you upgrade to n8n 3.0

Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.

Nodes used (11)

From the author

How It Works This workflow automates end-to-end code repository governance scanning using a multi-agent AI orchestration system. Designed for engineering leads, DevSecOps teams, and CTOs, it replaces manual code audits with a structured, AI-driven compliance…

Excerpt from Cheng Siong Chin's description on n8n.io.

View the original on n8n.io → Check your own copy

Get the weekly “what broke” email

New templates, newly broken ones, and n8n release changes. One short email a week.

Form not loading? Subscribe here.