{ "meta": { "instanceId": "workflow-96ebccc9", "versionId": "1.0.0", "createdAt": "2025-09-29T07:07:58.660110", "updatedAt": "2025-09-29T07:07:58.660172", "owner": "n8n-user", "license": "MIT", "category": "automation", "status": "active", "priority": "high", "environment": "production" }, "nodes": [ { "id": "be5b0c9c-de92-4e34-88cb-98e88b0c19df", "name": "Start VM Scan in Qualys", "type": "n8n-nodes-base.httpRequest", "position": [ 1340, 500 ], "parameters": { "": "", "url": "{{ $env.BASE_URL }}", "method": "POST", "options": {}, "sendBody": true, "sendQuery": true, "curlImport": "", "contentType": "multipart-form-data", "infoMessage": "", "sendHeaders": true, "specifyQuery": "keypair", "authentication": "{{ $credentials.predefinedCredentialType }}", "bodyParameters": { "parameters": [ { "name": "asset_groups", "value": "={{ $json.asset_groups }}", "parameterType": "formData" }, { "name": "scan_title", "value": "={{ $json.scan_title }}", "parameterType": "formData" }, { "name": "option_title", "value": "={{ $json.option_title }}", "parameterType": "formData" } ] }, "specifyHeaders": "keypair", "queryParameters": { "parameters": [ { "name": "action", "value": "launch" } ] }, "headerParameters": { "parameters": [ { "name": "X-Requested-With", "value": "n8n" } ] }, "httpVariantWarning": "", "nodeCredentialType": "YOUR_CREDENTIAL_HERE", "provideSslCertificates": false }, "credentials": { "qualysApi": { "id": "KdkmNjVYkDUzHAvw", "name": "Qualys account" } }, "typeVersion": 4.2, "extendsCredential": "YOUR_CREDENTIAL_HERE", "notes": "This httpRequest node performs automated tasks as part of the workflow." }, { "id": "0d140ce1-89e0-4135-821f-0b32004fc6aa", "name": "Convert XML to JSON", "type": "n8n-nodes-base.xml", "position": [ 1540, 500 ], "parameters": { "options": {}, "dataPropertyName": "=data" }, "typeVersion": 1, "notes": "This xml node performs automated tasks as part of the workflow." }, { "id": "ec737485-bf8b-4e8a-9843-2566c13106a8", "name": "Fetch Scan Results", "type": "n8n-nodes-base.httpRequest", "position": [ 2640, 460 ], "parameters": { "": "", "url": "{{ $env.BASE_URL }}", "method": "GET", "options": {}, "sendBody": false, "sendQuery": true, "curlImport": "", "infoMessage": "", "sendHeaders": true, "specifyQuery": "keypair", "authentication": "{{ $credentials.predefinedCredentialType }}", "specifyHeaders": "keypair", "queryParameters": { "parameters": [ { "name": "action", "value": "list" }, { "name": "scan_reference", "value": "={{ $('Convert XML to JSON').item.json.SIMPLE_RETURN.RESPONSE.ITEM_LIST.ITEM[1].VALUE }}" } ] }, "headerParameters": { "parameters": [ { "name": "X-Requested-With", "value": "n8n" } ] }, "httpVariantWarning": "", "nodeCredentialType": "YOUR_CREDENTIAL_HERE", "provideSslCertificates": false }, "credentials": { "qualysApi": { "id": "KdkmNjVYkDUzHAvw", "name": "Qualys account" } }, "typeVersion": 4.2, "extendsCredential": "YOUR_CREDENTIAL_HERE", "notes": "This httpRequest node performs automated tasks as part of the workflow." }, { "id": "56a60798-3db1-4c69-962f-75009f894196", "name": "Loop Over Items", "type": "n8n-nodes-base.splitInBatches", "position": [ 2220, 420 ], "parameters": { "options": { "reset": true } }, "typeVersion": 3, "notes": "This splitInBatches node performs automated tasks as part of the workflow." }, { "id": "37ac0cdf-8412-40c7-b01c-d592e4d1f378", "name": "Sticky Note2", "type": "n8n-nodes-base.stickyNote", "position": [ 2560, 180 ], "parameters": { "color": 7, "width": 596.2964035541726, "height": 493.43675548817004, "content": "![Imgur]({{ $env.WEBHOOK_URL }}\nFor more information about the query that is being performed on the Qualys end, check out the [Manage Scans Documentation]({{ $env.API_BASE_URL }} The results are returned in XML, which n8n can natively convert to JSON. This allows for easy checking of the status in n8n. " }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "075a4e21-cc30-4e31-a1f9-d2f872ab978c", "name": "Sticky Note3", "type": "n8n-nodes-base.stickyNote", "position": [ 1274.994996265108, 51.04030212612997 ], "parameters": { "color": 7, "width": 447.57018680355174, "height": 642.6627860215806, "content": "![Qualys]({{ $env.WEBHOOK_URL }}\n## Trigger scan on Qualys agent\nFor more information on launching a scan, visit the\n[Launch Documentation](\n{{ $env.API_BASE_URL }} The responses from Qualys are in XML, which n8n makes short work of. " }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "5da3f500-0ccf-4eed-9d05-7709668cf2bb", "name": "Wait 5 Min", "type": "n8n-nodes-base.wait", "position": [ 2440, 460 ], "webhookId": "f2d07724-882a-4010-9ce2-ff389ee962af", "parameters": { "unit": "minutes" }, "typeVersion": 1.1, "notes": "This wait node performs automated tasks as part of the workflow." }, { "id": "5cf921ac-cd6b-4a27-b679-3d1ecdb3eb49", "name": "Convert XML to JSON1", "type": "n8n-nodes-base.xml", "position": [ 2800, 460 ], "parameters": { "options": {}, "dataPropertyName": "=data" }, "typeVersion": 1, "notes": "This xml node performs automated tasks as part of the workflow." }, { "id": "0580bb11-38c4-49a1-ab00-4cdfb49c8f9d", "name": "Check if Scan Finished", "type": "n8n-nodes-base.if", "position": [ 3000, 460 ], "parameters": { "options": {}, "conditions": { "options": { "leftValue": "", "caseSensitive": true, "typeValidation": "strict" }, "combinator": "and", "conditions": [ { "id": "ef397200-064a-428f-a5b2-19d2342a9113", "operator": { "name": "filter.operator.equals", "type": "string", "operation": "equals" }, "leftValue": "={{ $json.SCAN_SUMMARY_OUTPUT.RESPONSE.SCAN_SUMMARY_LIST.SCAN_SUMMARY.SCAN_DETAILS.STATUS }}", "rightValue": "FINISHED" } ] } }, "typeVersion": 2, "notes": "This if node performs automated tasks as part of the workflow." }, { "id": "ec05f06b-e009-4f1c-97e4-223705d3be32", "name": "Execute Workflow Trigger", "type": "n8n-nodes-base.executeWorkflowTrigger", "position": [ 260, 520 ], "parameters": {}, "typeVersion": 1, "notes": "This executeWorkflowTrigger node performs automated tasks as part of the workflow." }, { "id": "1cbd10cd-342c-41bf-ae8f-832324cfbb30", "name": "Sticky Note11", "type": "n8n-nodes-base.stickyNote", "position": [ 220, 40 ], "parameters": { "color": 7, "width": 1043.6429958055905, "height": 657.4661247924577, "content": "![Slack]({{ $env.WEBHOOK_URL }}\n## Triggered from Slack Parent Workflow\nThe workflow begins with the execute workflow trigger, but the manual execution trigger was left in to test it manually. Make sure to turn of the execute workflow trigger when running it manually. Make sure to set your Slack Channel ID in the Edit node to ensure that the same channel is set across all slack nodes. From there, n8n sends a message to slack to let the user know that their request is being processed. The two threads are then merged to ensure only one thing is done at a time. Don't forget to set your Platform URL in the Global Variables. More information about that can be found at Qualys's [Platform Documentation]({{ $env.WEBHOOK_URL }} page. " }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "fb59e00b-36c6-429e-8696-f49b78445925", "name": "Sticky Note15", "type": "n8n-nodes-base.stickyNote", "position": [ 2160, 60 ], "parameters": { "color": 7, "width": 387.82834121275613, "height": 620.5198690828006, "content": "![n8n]({{ $env.WEBHOOK_URL }}\n## n8n Loop Node\nThe report objects are queried then loops every 5 min until the report returns a finished status. We have found that a report can take 40 minutes or more to complete. This is where n8n steps in and checks for us every 5 minutes. When the status of the scan changes to finished, the loop ends and the results are posted to Slack along with a link back to the scan results. " }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "2337ad0e-e361-474a-9923-75c4826400b6", "name": "Sticky Note13", "type": "n8n-nodes-base.stickyNote", "position": [ 3167, 184.84774251864644 ], "parameters": { "color": 7, "width": 679.3808146538605, "height": 493.10714356069377, "content": "![Imgur]({{ $env.WEBHOOK_URL }}\n## Upload Report to Slack\nOnce the scan is completed, the summary of the report and a link to report object is posted to Slack for easy retrieval. Additionally the original receipt message is deleted to ensure the new message generates a Slack notification. " }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "68a9eee6-05c4-4655-ab74-4a68fc68af26", "name": "Post Receipt", "type": "n8n-nodes-base.slack", "position": [ 740, 340 ], "parameters": { "text": "Vulnerability Scan request received, processing now. ", "select": "channel", "channelId": { "__rl": true, "mode": "id", "value": "={{ $('Global Variables & Slack Channel').item.json[\"slackChannelId\"] }}" }, "otherOptions": { "includeLinkToWorkflow": false } }, "credentials": { "slackApi": { "id": "DZJDes1ZtGpqClNk", "name": "Qualys Slack App" } }, "typeVersion": 2.2, "notes": "This slack node performs automated tasks as part of the workflow." }, { "id": "43af793b-061f-4048-b110-546903b803b6", "name": "Confirm Waiting", "type": "n8n-nodes-base.slack", "position": [ 1800, 540 ], "parameters": { "ts": "={{ $('Save receipt message timestamp').item.json[\"ts\"] }}", "text": "=Scan successfully initiated, now waiting for `{{ $('Convert XML to JSON').item.json.SIMPLE_RETURN.RESPONSE.ITEM_LIST.ITEM[1].VALUE }}` to complete. \n\nNo action is needed, and I will post the summary report and link to results when it's complete. ", "channelId": { "__rl": true, "mode": "id", "value": "={{ $('Global Variables & Slack Channel').item.json[\"slackChannelId\"] }}" }, "operation": "update", "updateFields": { "parse": "client", "link_names": false } }, "credentials": { "slackApi": { "id": "DZJDes1ZtGpqClNk", "name": "Qualys Slack App" } }, "typeVersion": 2.2, "notes": "This slack node performs automated tasks as part of the workflow." }, { "id": "326bb10c-0e8e-4df7-bc67-dad015240d15", "name": "Delete Receipt", "type": "n8n-nodes-base.slack", "position": [ 3480, 440 ], "parameters": { "select": "channel", "channelId": { "__rl": true, "mode": "id", "value": "={{ $('Global Variables & Slack Channel').item.json[\"slackChannelId\"] }}" }, "operation": "delete", "timestamp": "={{ $('Save receipt message timestamp').item.json[\"ts\"] }}" }, "credentials": { "slackApi": { "id": "DZJDes1ZtGpqClNk", "name": "Qualys Slack App" } }, "typeVersion": 2.2, "notes": "This slack node performs automated tasks as part of the workflow." }, { "id": "c8668283-e6ec-4dbd-92d0-aec1f07c01a7", "name": "Sticky Note", "type": "n8n-nodes-base.stickyNote", "position": [ 1740.3532113511565, 44.007696543933434 ], "parameters": { "color": 7, "width": 408.91770357210225, "height": 645.055566466257, "content": "![Slack]({{ $env.WEBHOOK_URL }}\n## Let user's know that it's time to wait\nGood customer service comes from communication. And that's what this section does, it alerts the user that the scan was triggered successfully, and now it is time to wait for it to finish. Feel free to change this message to better suit your needs. It will be deleted when the results are posted. " }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "defa2773-ea65-481d-a6d6-bb40c70e6762", "name": "Sticky Note8", "type": "n8n-nodes-base.stickyNote", "position": [ -440, 40 ], "parameters": { "width": 646.7396383244529, "height": 994.2389415638766, "content": "![n8n]({{ $env.WEBHOOK_URL }}\n# Qualys Vulnerability Trigger Scan Workflow\n\n## This workflow is triggered by a parent workflow initiated via a Slack shortcut. Upon activation, it collects input from a modal window in Slack and initiates a vulnerability scan using the Qualys API.\n\n**Key Features:**\n- **Trigger:** Launched by a parent workflow through a Slack shortcut with modal input.\n- **API Integration:** Utilizes the Qualys API for vulnerability scanning.\n- **Data Conversion:** Converts XML scan results to JSON for further processing.\n- **Loop Mechanism:** Continuously checks the scan status until completion.\n- **Slack Notifications:** Posts scan summary and detailed results to a specified Slack channel.\n\n\n**Workflow Nodes:**\n1. **Start VM Scan in Qualys:** Initiates the scan with specified parameters.\n2. **Convert XML to JSON:** Converts the scan results from XML format to JSON.\n3. **Fetch Scan Results:** Retrieves scan results from Qualys.\n4. **Check if Scan Finished:** Verifies whether the scan is complete.\n5. **Loop Mechanism:** Handles the repetitive checking of the scan status.\n6. **Slack Notifications:** Posts updates and results to Slack.\n\n\n**Relevant Links:**\n- [Qualys API Documentation]({{ $env.API_BASE_URL }}\n- [Qualys Platform Documentation]({{ $env.WEBHOOK_URL }}\n" }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "de2c15bd-4144-4ca8-9c0d-370ecf334650", "name": "Demo Data", "type": "n8n-nodes-base.set", "position": [ 560, 520 ], "parameters": { "options": {}, "assignments": { "assignments": [ { "id": "070178a6-73b0-458b-8657-20ab4ff0485c", "name": "option_title", "type": "string", "value": "Initial Options" }, { "id": "3605424b-5bfc-44f0-b6e4-e0d6b1130b8e", "name": "scan_title", "type": "string", "value": "n8n Scan 1" }, { "id": "2320d966-b834-46fb-b674-be97cc08682e", "name": "asset_groups", "type": "string", "value": "Group1" } ] } }, "typeVersion": 3.3, "notes": "This set node performs automated tasks as part of the workflow." }, { "id": "0ec55480-424c-4686-b8f7-8a98b5941c8e", "name": "Sticky Note4", "type": "n8n-nodes-base.stickyNote", "position": [ 820, 700 ], "parameters": { "color": 5, "width": 535.8333316661617, "height": 702.5170959123625, "content": "![Qualys]({{ $env.WEBHOOK_URL }}\n### πŸ”„The data input into this Modal will be processed in this workflow" }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." }, { "id": "9f6291ad-280f-4a0c-b84a-5eebfbb9172f", "name": "Merge", "type": "n8n-nodes-base.merge", "position": [ 1120, 500 ], "parameters": { "mode": "combine", "options": {}, "combinationMode": "multiplex" }, "typeVersion": 2.1, "notes": "This merge node performs automated tasks as part of the workflow." }, { "id": "783d9bcd-faf1-4427-ab5c-de32df64f819", "name": "Post Vulnerability Scan Summary to Slack", "type": "n8n-nodes-base.slack", "position": [ 3240, 500 ], "parameters": { "select": "channel", "blocksUi": "={\n\t\"blocks\": [\n\t\t{\n\t\t\t\"type\": \"image\",\n\t\t\t\"block_id\": \"image_1\",\n\t\t\t\"image_url\": \"{{ $env.WEBHOOK_URL }}\",\n\t\t\t\"alt_text\": \"{{ $('Convert XML to JSON').item.json[\"SIMPLE_RETURN\"][\"RESPONSE\"][\"ITEM_LIST\"][\"ITEM\"][0][\"VALUE\"] }}\"\n\t\t},\n\t\t{\n\t\t\t\"type\": \"header\",\n\t\t\t\"block_id\": \"header_1\",\n\t\t\t\"text\": {\n\t\t\t\t\"type\": \"plain_text\",\n\t\t\t\t\"text\": \"πŸ“Š Qualys Scan Summary\"\n\t\t\t}\n\t\t},\n\t\t{\n\t\t\t\"type\": \"section\",\n\t\t\t\"block_id\": \"section_scan_details\",\n\t\t\t\"text\": {\n\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\"text\": \"*πŸ“ Scan Title:* {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_INPUT\"][\"TITLE\"] }}\\n*πŸ‘€ User:* {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_INPUT\"][\"USER\"][\"USERNAME\"] }}\\n*πŸ” Scan Status:* FINISHED\"\n\t\t\t}\n\t\t},\n\t\t{\n\t\t\t\"type\": \"section\",\n\t\t\t\"block_id\": \"section_general_info\",\n\t\t\t\"fields\": [\n\t\t\t\t{\n\t\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\t\"text\": \"*⏱️ Scheduled:* {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_INPUT\"][\"SCHEDULED\"] }}\"\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\t\"text\": \"*πŸ“‹ Option Profile:* {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_INPUT\"][\"OPTION_PROFILE\"][\"NAME\"] }}\"\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\t\"text\": \"*🎯 Targets:* IP List ({{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_INPUT\"][\"TARGETS\"][\"IP_LIST\"][\"COUNT\"] }} IPs), Asset Group {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_INPUT\"][\"TARGETS\"][\"ASSET_GROUP_LIST\"][\"ASSET_GROUP_DATA\"][\"ASSET_GROUP\"][\"NAME\"] }}\"\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\t\"text\": \"*πŸš€ Scan Launched:* {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_INPUT\"][\"SCAN_DATETIME\"] }}\"\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\t\"text\": \"*⏳ Duration:* {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_DETAILS\"][\"DURATION\"] }} seconds\"\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\t\"text\": \"*πŸ–₯️ Detected Hosts:* {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"HOSTS\"][\"COUNT\"] }}\"\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t{\n\t\t\t\"type\": \"section\",\n\t\t\t\"block_id\": \"section_detections_summary\",\n\t\t\t\"text\": {\n\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\"text\": \"*πŸ”Ž Detections Summary:*\"\n\t\t\t}\n\t\t},\n\t\t{\n\t\t\t\"type\": \"section\",\n\t\t\t\"block_id\": \"section_detections_details\",\n\t\t\t\"fields\": [\n\t\t\t\t{\n\t\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\t\"text\": \"*πŸ›‘οΈ Confirmed Vulnerabilities:* {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"CONFIRMED\"][\"TOTAL_COUNT\"] }}\\n - Minimal Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"CONFIRMED\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_1\"] }}\\n - Medium Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"CONFIRMED\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_2\"] }}\\n - Serious Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"CONFIRMED\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_3\"] }}\\n - Critical Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"CONFIRMED\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_4\"] }}\\n - Urgent Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"CONFIRMED\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_5\"] }}\"\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\t\"text\": \"*πŸ“ˆ Information Gathered:* {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"IG\"][\"TOTAL_COUNT\"] }}\\n - Minimal Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"IG\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_1\"] }}\\n - Medium Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"IG\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_2\"] }}\\n - Serious Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"IG\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_3\"] }}\"\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\t\"text\": \"*⚠️ Potential Vulnerabilities:* {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"POTENTIAL\"][\"TOTAL_COUNT\"] }}\\n - Minimal Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"POTENTIAL\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_1\"] }}\\n - Medium Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"POTENTIAL\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_2\"] }}\\n - Serious Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"POTENTIAL\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_3\"] }}\\n - Critical Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"POTENTIAL\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_4\"] }}\\n - Urgent Severity: {{ $json[\"SCAN_SUMMARY_OUTPUT\"][\"RESPONSE\"][\"SCAN_SUMMARY_LIST\"][\"SCAN_SUMMARY\"][\"SCAN_RESULTS\"][\"DETECTIONS\"][\"VULN\"][\"POTENTIAL\"][\"COUNT_BY_SEVERITY\"][\"SEVERITY_5\"] }}\"\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t{\n\t\t\t\"type\": \"section\",\n\t\t\t\"block_id\": \"final_section_with_button\",\n\t\t\t\"text\": {\n\t\t\t\t\"type\": \"mrkdwn\",\n\t\t\t\t\"text\": \"πŸ”— View the full report in Qualys\"\n\t\t\t},\n\t\t\t\"accessory\": {\n\t\t\t\t\"type\": \"button\",\n\t\t\t\t\"text\": {\n\t\t\t\t\t\"type\": \"plain_text\",\n\t\t\t\t\t\"text\": \"View Report in Qualys\",\n\t\t\t\t\t\"emoji\": true\n\t\t\t\t},\n\t\t\t\t\"value\": \"click_me_123\",\n\t\t\t\t\"style\": \"primary\",\n\t\t\t\t\"url\": \"{{ $('Demo Data').item.json[\"platformurl\"] }}/fo/report/report_view.php?id={{ $('Convert XML to JSON').item.json[\"SIMPLE_RETURN\"][\"RESPONSE\"][\"ITEM_LIST\"][\"ITEM\"][0][\"VALUE\"] }}&default=1&format=30\",\n\t\t\t\t\"action_id\": \"button-action\"\n\t\t\t}\n\t\t}\n\t]\n}", "channelId": { "__rl": true, "mode": "id", "value": "={{ $('Global Variables & Slack Channel').item.json[\"slackChannelId\"] }}" }, "messageType": "block", "otherOptions": {} }, "credentials": { "slackApi": { "id": "DZJDes1ZtGpqClNk", "name": "Qualys Slack App" } }, "typeVersion": 2.2, "notes": "This slack node performs automated tasks as part of the workflow." }, { "id": "91444583-66d8-4d5b-ba88-4d8869d508b6", "name": "When clicking \"Test workflow\"", "type": "n8n-nodes-base.manualTrigger", "disabled": true, "position": [ 260, 340 ], "parameters": {}, "typeVersion": 1, "notes": "This manualTrigger node performs automated tasks as part of the workflow." }, { "id": "4b8ade25-0377-4f00-a744-f610b17eea93", "name": "Begin Wait Loop", "type": "n8n-nodes-base.noOp", "position": [ 1800, 400 ], "parameters": {}, "typeVersion": 1, "notes": "This noOp node performs automated tasks as part of the workflow." }, { "id": "b830b9d8-e7aa-49bb-9640-d1def697f3e1", "name": "Merge1", "type": "n8n-nodes-base.merge", "position": [ 2020, 420 ], "parameters": { "mode": "chooseBranch" }, "typeVersion": 2.1, "notes": "This merge node performs automated tasks as part of the workflow." }, { "id": "389381c3-bd51-4e22-a102-e47b5945576c", "name": "Save receipt message timestamp", "type": "n8n-nodes-base.set", "position": [ 920, 340 ], "parameters": { "options": {}, "assignments": { "assignments": [ { "id": "111526ec-0501-4af9-b66e-c677cb8fe25f", "name": "ts", "type": "string", "value": "={{ $json.message.ts }}" } ] } }, "typeVersion": 3.3, "notes": "This set node performs automated tasks as part of the workflow." }, { "id": "51005deb-2676-4375-9ac8-780eb301f7f5", "name": "Global Variables & Slack Channel", "type": "n8n-nodes-base.set", "position": [ 560, 340 ], "parameters": { "options": {}, "assignments": { "assignments": [ { "id": "9849fe48-7a7a-4f2b-a404-c7827249e9c2", "name": "slackChannelId", "type": "string", "value": "C05LAN72WJK" }, { "id": "36aad8b5-b51a-4df0-b1a7-159a90b802b2", "name": "platformurl", "type": "string", "value": "{{ $env.API_BASE_URL }}" } ] } }, "typeVersion": 3.3, "notes": "This set node performs automated tasks as part of the workflow." }, { "id": "7d6d5ab7-5a87-46c8-baa8-d79a05d8346d", "name": "Sticky Note5", "type": "n8n-nodes-base.stickyNote", "position": [ 220, 700 ], "parameters": { "color": 5, "width": 596.6847639718076, "height": 438.8903816479826, "content": "![Qualys]({{ $env.WEBHOOK_URL }}\n### πŸ€– Triggering this workflow is as easy as typing a backslash in Slack and filling out the modal on the right" }, "typeVersion": 1, "notes": "This stickyNote node performs automated tasks as part of the workflow." } ], "pinData": {}, "connections": { "be5b0c9c-de92-4e34-88cb-98e88b0c19df": { "main": [ [ { "node": "error-handler-be5b0c9c-de92-4e34-88cb-98e88b0c19df", "type": "main", "index": 0 } ], [ { "node": "error-handler-be5b0c9c-de92-4e34-88cb-98e88b0c19df-75c50791", "type": "main", "index": 0 } ], [ { "node": "error-handler-be5b0c9c-de92-4e34-88cb-98e88b0c19df-993f9a6c", "type": "main", "index": 0 } ], [ { "node": "error-handler-be5b0c9c-de92-4e34-88cb-98e88b0c19df-9b4b2ed8", "type": "main", "index": 0 } ], [ { "node": "error-handler-be5b0c9c-de92-4e34-88cb-98e88b0c19df-7e1d39ab", "type": "main", "index": 0 } ], [ { "node": "error-handler-be5b0c9c-de92-4e34-88cb-98e88b0c19df-48e88e31", "type": "main", "index": 0 } ], [ { "node": "error-handler-be5b0c9c-de92-4e34-88cb-98e88b0c19df-9460d7c6", "type": "main", "index": 0 } ], [ { "node": "error-handler-be5b0c9c-de92-4e34-88cb-98e88b0c19df-e5f315c9", "type": "main", "index": 0 } ], [ { "node": "error-handler-be5b0c9c-de92-4e34-88cb-98e88b0c19df-7de2fd8a", "type": "main", "index": 0 } ] ] }, "ec737485-bf8b-4e8a-9843-2566c13106a8": { "main": [ [ { "node": "error-handler-ec737485-bf8b-4e8a-9843-2566c13106a8", "type": "main", "index": 0 } ], [ { "node": "error-handler-ec737485-bf8b-4e8a-9843-2566c13106a8-8a6448c1", "type": "main", "index": 0 } ], [ { "node": "error-handler-ec737485-bf8b-4e8a-9843-2566c13106a8-3d2e2850", "type": "main", "index": 0 } ], [ { "node": "error-handler-ec737485-bf8b-4e8a-9843-2566c13106a8-cb862a93", "type": "main", "index": 0 } ], [ { "node": "error-handler-ec737485-bf8b-4e8a-9843-2566c13106a8-b097d1eb", "type": "main", "index": 0 } ], [ { "node": "error-handler-ec737485-bf8b-4e8a-9843-2566c13106a8-ef44c7be", "type": "main", "index": 0 } ], [ { "node": "error-handler-ec737485-bf8b-4e8a-9843-2566c13106a8-8f68d55c", "type": "main", "index": 0 } ], [ { "node": "error-handler-ec737485-bf8b-4e8a-9843-2566c13106a8-9cb90609", "type": "main", "index": 0 } ], [ { "node": "error-handler-ec737485-bf8b-4e8a-9843-2566c13106a8-a2ec5241", "type": "main", "index": 0 } ] ] }, "68a9eee6-05c4-4655-ab74-4a68fc68af26": { "main": [ [ { "node": "error-handler-68a9eee6-05c4-4655-ab74-4a68fc68af26-dfa8e370", "type": "main", "index": 0 } ] ] }, "43af793b-061f-4048-b110-546903b803b6": { "main": [ [ { "node": "error-handler-43af793b-061f-4048-b110-546903b803b6-0b98d806", "type": "main", "index": 0 } ] ] }, "326bb10c-0e8e-4df7-bc67-dad015240d15": { "main": [ [ { "node": "error-handler-326bb10c-0e8e-4df7-bc67-dad015240d15-192ad680", "type": "main", "index": 0 } ] ] }, "783d9bcd-faf1-4427-ab5c-de32df64f819": { "main": [ [ { "node": "error-handler-783d9bcd-faf1-4427-ab5c-de32df64f819-5a951d7a", "type": "main", "index": 0 } ] ] } }, "name": "Httprequest Workflow", "settings": { "executionOrder": "v1", "saveManualExecutions": true, "callerPolicy": "workflowsFromSameOwner", "errorWorkflow": null, "timezone": "UTC", "executionTimeout": 3600, "maxExecutions": 1000, "retryOnFail": true, "retryCount": 3, "retryDelay": 1000 }, "description": "Automated workflow: Httprequest Workflow. This workflow integrates 13 different services: stickyNote, httpRequest, wait, merge, set. It contains 36 nodes and follows best practices for error handling and security.", "tags": [ "automation", "n8n", "production-ready", "excellent", "optimized" ], "notes": "Excellent quality workflow: Httprequest Workflow. This workflow has been optimized for production use with comprehensive error handling, security, and documentation." }