{"product_id":"cve-triage-webhook-workflow-nvd-gemini-supabase-jira","title":"CVE Triage Webhook Workflow: NVD, Gemini, Supabase \u0026 Jira","description":"\u003ch3\u003eAuto-triage CVE alerts into the right Jira action—powered by NVD, Gemini, Supabase \u0026amp; Redis\u003c\/h3\u003e\n\u003cp\u003eThis \u003cstrong\u003en8n CVE Triage Webhook Workflow\u003c\/strong\u003e receives vulnerability alerts via webhook, enriches them with \u003cstrong\u003eNVD\u003c\/strong\u003e and \u003cstrong\u003eSupabase\u003c\/strong\u003e asset context, uses \u003cstrong\u003eGoogle Gemini\u003c\/strong\u003e for structured risk triage, deduplicates repeated events with \u003cstrong\u003eRedis\u003c\/strong\u003e, and then automatically creates the appropriate \u003cstrong\u003eJira\u003c\/strong\u003e issue before responding to the caller.\u003c\/p\u003e\n\n\u003ch3\u003eWhat this workflow does\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003eAccepts webhook alerts\u003c\/strong\u003e via a POST request using \u003cstrong\u003eheader-based authentication\u003c\/strong\u003e.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eValidates the payload\u003c\/strong\u003e: checks for a properly formatted \u003cstrong\u003eCVE ID\u003c\/strong\u003e and a non-empty `IP address`. If invalid, it immediately returns an error response.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eDeduplicates alerts\u003c\/strong\u003e: increments a Redis counter keyed by \u003cstrong\u003eCVE ID + IP address\u003c\/strong\u003e and returns a duplicate response if the event was already seen.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eEnriches CVE data\u003c\/strong\u003e by fetching details from the \u003cstrong\u003eNVD REST API\u003c\/strong\u003e.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eLooks up affected asset context\u003c\/strong\u003e in \u003cstrong\u003eSupabase\u003c\/strong\u003e using the provided IP address.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eTriages with Gemini\u003c\/strong\u003e: sends combined vulnerability + CMDB context to a \u003cstrong\u003eGoogle Gemini-powered agent\u003c\/strong\u003e that returns structured \u003cstrong\u003eJSON\u003c\/strong\u003e including a risk score, action, and reasoning.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eCreates the right Jira issue\u003c\/strong\u003e for either \u003cstrong\u003eemergency remediation (auto-patch)\u003c\/strong\u003e or \u003cstrong\u003emanual review\u003c\/strong\u003e (ticket_only\/unclear), then responds to the webhook request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eUse cases\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003eSecOps teams that want \u003cstrong\u003ereal-time CVE triage\u003c\/strong\u003e from scanner alerts to Jira tickets.\u003c\/li\u003e\n  \u003cli\u003eSaaS operators linking \u003cstrong\u003eIP-based asset context\u003c\/strong\u003e from Supabase\/CMDB to vulnerability decisions.\u003c\/li\u003e\n  \u003cli\u003eOrganizations needing \u003cstrong\u003esafe deduplication\u003c\/strong\u003e to prevent ticket spam for the same CVE\/IP combination.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eTechnical details\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003en8n nodes\u003c\/strong\u003e: webhook, if, set, redis, switch, jira.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eIntegrations\u003c\/strong\u003e: \u003cstrong\u003eNVD REST API\u003c\/strong\u003e for CVE enrichment, \u003cstrong\u003eGoogle Gemini\u003c\/strong\u003e for structured triage output, \u003cstrong\u003eSupabase\u003c\/strong\u003e for asset lookup, \u003cstrong\u003eJira\u003c\/strong\u003e for issue creation.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eRedis\u003c\/strong\u003e keyspace: `secops-dedup:*` (optionally configure TTL\/eviction).\u003c\/li\u003e\n\u003c\/ul\u003e","brand":"N8N Commerce","offers":[{"title":"Default Title","offer_id":45876872511667,"sku":"N8N-18508","price":8.99,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0749\/6279\/6723\/files\/BM8z3DM8Qw6bqNW1eXIwz_3X8ECXw5.png?v=1787303517","url":"https:\/\/buyflowscripts.com\/products\/cve-triage-webhook-workflow-nvd-gemini-supabase-jira","provider":"N8N Commerce","version":"1.0","type":"link"}