IT OPS
TLS Cert Expiry Sweep to Trello Remediation Board
Runs a scheduled shell sweep across a host inventory, checks each TLS certificate's days-to-expiry.
How it runs
The automated pipeline, trigger to output.
- TriggerNightly schedule fires the cert sweep
- ActionShell: openssl-scan each host for days-to-expiryShell
- LogicKeep only certs under the warning threshold
- ActionUpsert a Trello card per expiring cert (dedupe by host)Trello
- OutputEmit run summary of flagged certsTrello
What it does
Walks a list of hostnames, opens a TLS connection to each, reads the leaf certificate's notAfter date, and computes days remaining. Any cert inside the warning window becomes a tracked Trello card on your remediation board, deduplicated by hostname so re-running the sweep never spawns duplicate cards.
When to use it
When you own more than a handful of TLS endpoints and "we forgot to renew it" has bitten you before. Schedule it nightly so renewals always land with days to spare instead of as a 2 a.m. outage.
How it works
- 1A nightly schedule fires the sweep.
- 2A shell step loops the host inventory running `openssl s_client` + `openssl x509 -enddate` per host, emitting hostname and days-to-expiry as JSON.
- 3A logic step keeps only hosts under the threshold (e.g. 30 days).
- 4For each remaining host, a Trello action upserts a card in the To Do list, titled with the hostname and days left, labeled by urgency.
- 5The flow outputs a run summary of how many certs were flagged.
Set it up
What you configure once, before turning it on.
- 1Connect ShellRun sandboxed commands inside the workspace.
- 2Connect TrelloKanban boards for everything.
- 3Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 4Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 5Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More IT Ops workflows
Daily Building Anomaly Digest to MS Teams
Each morning queries BigQuery for the prior day's flagged sensor anomalies, summarizes them by site and system into a ranked briefing.
Indoor Air Quality Breach to Tenant Notice and Work Order
Listens for CO2, VOC, or humidity sensor alerts via webhook, and when a zone exceeds occupant-safety limits it emails affected tenants, opens a Monday remediation task.
Self-Service Reclaim Email for Idle Users
Detects users idle in a SaaS app past the threshold and emails each one a keep-or-release link; unanswered seats after the deadline are auto-flagged for removal.
Outlook Room Conflict Resolver with Approval Gate in Teams
When an Outlook room clashes, proposes a rebooking and asks the bumped meeting's organizer to approve the move in Microsoft Teams before any change is made.
Outlook Room Double-Booking Resolver with Auto-Rebook
Detects when two meetings claim the same Outlook room resource and automatically relocates the lower-priority meeting to a comparable free room.
Monthly Wasted-License Cost Report
Aggregates inactive-seat data across all tracked SaaS apps each month, computes total reclaimable spend, and delivers a ranked cost report to leadership in Notion and Slack.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.
Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.