Scan code repositories for governance issues with GPT-4o and severity-based reports
Ready for 3.0What this workflow does
This AI workflow has 23 nodes and runs manually, when you click “Execute workflow”. Along the way it connects OpenAI Chat Model.
How it runs
Trigger: Manually, when you click “Execute workflow”.
- Extract Repository Metadata (SSH): uses SSH
- Governance Orchestrator Agent (AI Agent): runs an AI agent, with model: Orchestrator Model; 4 tools (Static Code Analysis Agent, CTO Report Generation Agent, Architectural Compliance Agent, Security Vulnerability Scanner Agent); output parser: Structured Governance Output
- Format Final Report (Edit Fields (Set)): sets 3 fields: reportGeneratedAt, repositoryScanned, governanceReport
- Check Critical Issues Threshold (If): checks a condition and branches into true / false
- Prepare Escalation Alert (Edit Fields (Set)): sets 5 fields: alertType, criticalIssuesCount, escalationRequired…
- Log Standard Report (Edit Fields (Set)): sets 3 fields: reportStatus, loggedAt, summary
- Route by Severity Level (Switch): routes items into 2 branches
- Merge: merges the data from its input branches
- Critical Severity Handler (Edit Fields (Set)): sets 4 fields: severityLevel, actionRequired, notificationPriority…
- Medium Severity Handler (Edit Fields (Set)): sets 4 fields: severityLevel, actionRequired, notificationPriority…
…plus 2 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (11)
- Manual Trigger
n8n-nodes-base.manualTrigger - SSH
n8n-nodes-base.ssh - AI Agent
@n8n/n8n-nodes-langchain.agent - OpenAI Chat Model
@n8n/n8n-nodes-langchain.lmChatOpenAi - AI Agent Tool
@n8n/n8n-nodes-langchain.agentTool - Structured Output Parser
@n8n/n8n-nodes-langchain.outputParserStructured - Edit Fields (Set)
n8n-nodes-base.set - If
n8n-nodes-base.if - Aggregate
n8n-nodes-base.aggregate - Switch
n8n-nodes-base.switch - Merge
n8n-nodes-base.merge
From the author
How It Works This workflow automates end-to-end code repository governance scanning using a multi-agent AI orchestration system. Designed for engineering leads, DevSecOps teams, and CTOs, it replaces manual code audits with a structured, AI-driven compliance…