{"product_id":"fail-ci-on-osv-dev-high-critical-vulnerabilities-with-webhook","title":"Fail CI on OSV.dev HIGH\/Critical Vulnerabilities with Webhook","description":"\u003ch3\u003eFail Your CI When OSV.dev Finds HIGH\/Critical Vulnerabilities (Webhook-Based)\u003c\/h3\u003e\n\u003cp\u003eThis n8n workflow turns \u003cstrong\u003eOSV.dev vulnerability intelligence\u003c\/strong\u003e into a \u003cstrong\u003eCI pass\/fail gate\u003c\/strong\u003e—it receives a dependency manifest via \u003cstrong\u003ewebhook\u003c\/strong\u003e, checks exact versions against OSV.dev using an \u003cstrong\u003eApify Actor\u003c\/strong\u003e, and returns a CI-friendly summary that flags \u003cstrong\u003eHIGH\u003c\/strong\u003e and \u003cstrong\u003eCRITICAL\u003c\/strong\u003e findings.\u003c\/p\u003e\n\n\u003ch3\u003eWhat this workflow does\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003eReceives a POST request\u003c\/strong\u003e on a webhook with either:\n    \u003cul\u003e\n      \u003cli\u003e\n\u003ccode\u003e{\"manifestText\":\"...\"}\u003c\/code\u003e (e.g., raw lockfile\/manifest text), or\u003c\/li\u003e\n      \u003cli\u003e\n\u003ccode\u003e{\"packages\":[{\"ecosystem\":\"npm\",\"name\":\"lodash\",\"version\":\"4.17.20\"}]}\u003c\/code\u003e (an explicit package\/version list).\u003c\/li\u003e\n    \u003c\/ul\u003e\n  \u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eNormalizes and validates the payload\u003c\/strong\u003e, applying defaults such as \u003cstrong\u003eminimum severity (HIGH)\u003c\/strong\u003e and whether to include \u003cstrong\u003edev dependencies\u003c\/strong\u003e, and ensures a manifest or package list is provided.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eQueries OSV.dev\u003c\/strong\u003e through the Apify actor \u003cstrong\u003efairquery\/osv-dependency-vulnerability-check\u003c\/strong\u003e to retrieve vulnerability rows for the exact versions supplied.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eAggregates results into a CI gate summary\u003c\/strong\u003e:\n    \u003cul\u003e\n      \u003cli\u003eCounts packages checked and vulnerable packages\u003c\/li\u003e\n      \u003cli\u003eCounts HIGH\/CRITICAL vulnerabilities\u003c\/li\u003e\n      \u003cli\u003eLists top findings and suggested fixed versions\u003c\/li\u003e\n    \u003c\/ul\u003e\n  \u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eReturns the summary as the webhook response\u003c\/strong\u003e, including a \u003cem\u003efail flag\u003c\/em\u003e you can use to fail your CI job when HIGH\/CRITICAL issues are found.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eUse cases\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003eGate a CI pipeline so builds fail if OSV.dev reports \u003cstrong\u003eHIGH\/CRITICAL\u003c\/strong\u003e vulnerabilities in dependency lockfiles.\u003c\/li\u003e\n  \u003cli\u003eValidate dependency changes in PRs by posting the updated manifest text to the n8n webhook.\u003c\/li\u003e\n  \u003cli\u003eRun security checks on selected package\/version sets (e.g., during release workflows) and automatically surface the highest-risk fixes.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eTechnical details\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003en8n nodes:\u003c\/strong\u003e code, webhook, sticky note, http request\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eOSV.dev lookup:\u003c\/strong\u003e Apify Actor \u003cstrong\u003efairquery\/osv-dependency-vulnerability-check\u003c\/strong\u003e\n\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eApify auth:\u003c\/strong\u003e set an \u003ccode\u003eAuthorization: Bearer \u0026lt;YOUR_APIFY_TOKEN\u0026gt;\u003c\/code\u003e header in the HTTP request step\u003c\/li\u003e\n\u003c\/ul\u003e","brand":"N8N Commerce","offers":[{"title":"Default Title","offer_id":46232429625523,"sku":"N8N-21043","price":14.99,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0749\/6279\/6723\/files\/HiXphIH7g8OZxk6wk7O4f_TEfO0R1x.png?v=1792142165","url":"https:\/\/buyflowscripts.com\/products\/fail-ci-on-osv-dev-high-critical-vulnerabilities-with-webhook","provider":"N8N Commerce","version":"1.0","type":"link"}