Secure n8n Workflows: Detect Secrets & Report via Telegram

Secure n8n Workflows: Detect Secrets & Report via Telegram

Protect your sensitive data and maintain compliance with the "Secure n8n Workflows" solution, designed to detect leaked credentials and notify you instantly via Telegram. Identify and mask confidential information embedded in your n8n workflows and effortlessly manage security risks across your automation ecosystem.

What this workflow does

• Scans every workflow on your n8n instance daily using the n8n API.
• Strips sensitive identifiers including instance IDs, pinned test data, webhook IDs, and credential IDs to maintain your clients' privacy.
• Matches remaining JSON data against a comprehensive rule set covering private keys, AWS keys, JWTs, Bearer tokens, Slack tokens, GitHub PATs, OpenAI keys, secrets in URLs, and email addresses.
• Generates severity-based reports for each detected match while masking sensitive data in the GitHub snapshot.
• Commits masked snapshots to GitHub, ensuring coherent workflow history based on unique workflow IDs.
• Aggregates all findings into a Telegram report sent only if they meet your preset severity threshold.

Use cases

• Data Protection for SaaS Operators: Constantly monitor and patch vulnerabilities in your n8n workflows to prevent data breaches.
• Automation Security for Engineers: Ensure that no critical data is inadvertently exposed by integrating this workflow into your security protocols.
• Compliance for n8n Users: Maintain compliance with data protection policies by actively detecting and reporting credentials via Telegram.

Technical details

• Involves integration of the following nodes: if, n8n, set, code, filter, GitHub.
• Requires n8n API, GitHub, and Telegram credentials for seamless operation.
• Customizable alert thresholds to manage notification frequency and severity levels.

With "Secure n8n Workflows," take a proactive stance on security by detecting and managing sensitive information leaks with precision and speed.