Review and remediate Kubernetes manifests in GitHub PRs with GPT-4.1
Needs changesNeeds changes. This template uses 2 thing(s) that n8n 3.0 removes: HTTP Request Tool (legacy), AI Agent v1 (old agent modes). 2 breaking item(s) found. Static check, last run 2026-10-19.
What this workflow does
This AI workflow has 22 nodes and runs on Github events (pull request). Along the way it connects GitHub, HTTP Request, Vector Store Question Answer and OpenAI Chat Model and 2 more.
How it runs
Trigger: On Github events (pull request).
- Set - Config (Edit Fields (Set)): sets 8 fields: prNumber, repoOwner, repoName…
- Get - PR Manifest Files (GitHub): get files (pull request)
- AI Agent: runs an AI agent, with model: OpenAI Chat Model; 5 tools (Tool - Scan Resource Limits, Tool - Scan Exposed Services, Tool - Scan RBAC Permissions, Tool - Scan Privileged Containers…); memory: Window Buffer Memory
- Set - Parse Agent Output (Edit Fields (Set)): sets 1 field: parsedOutput
- Postgres: uses Postgres
- GitHub: create comment
- If: checks a condition and branches into true / false
- Slack: uses Slack
- If: checks a condition and branches into true / false
- GitHub: create branch (repository)
…plus 4 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
2 things in this workflow are removed in n8n 3.0. Fix them before you upgrade:
- HTTP Request Tool (legacy) in Tool - Scan Privileged Containers, Tool - Scan RBAC Permissions, Tool - Scan Exposed Services…: replace with HTTP Request node connected to the AI Agent's Tool input.
- AI Agent v1 (old agent modes) in AI Agent - K8s Security Reviewer (v1.6): replace with Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent.
Rather not rewrite it? Many of these flows can be rebuilt in Make (free plan).
| Removed in 3.0 | Replace with |
|---|---|
| HTTP Request Tool (legacy) Tool - Scan Privileged Containers, Tool - Scan RBAC Permissions, Tool - Scan Exposed Services, Tool - Scan Resource Limits | HTTP Request node connected to the AI Agent's Tool input |
| AI Agent v1 (old agent modes) AI Agent - K8s Security Reviewer (v1.6) | Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent. |
Nodes used (11)
- Github Trigger
n8n-nodes-base.githubTrigger - Edit Fields (Set)
n8n-nodes-base.set - GitHub
n8n-nodes-base.github - HTTP Request Tool
@n8n/n8n-nodes-langchain.toolHttpRequest - Vector Store Question Answer Tool
@n8n/n8n-nodes-langchain.toolVectorStore - OpenAI Chat Model
@n8n/n8n-nodes-langchain.lmChatOpenAi - Simple Memory
@n8n/n8n-nodes-langchain.memoryBufferWindow - AI Agent
@n8n/n8n-nodes-langchain.agent - Postgres
n8n-nodes-base.postgres - If
n8n-nodes-base.if - Slack
n8n-nodes-base.slack
From the author
Quick overview This workflow reviews Kubernetes manifest changes in GitHub pull requests using OpenAI with policy RAG and external scanner APIs, logs results to Postgres, posts findings back to the PR, and—after Slack approval—commits secure manifest fixes to…