ENGINEERING
Approved-Dependency Compliance Changelog to Sheet
On every merge to the default branch, records each newly added dependency, its license, and the approving reviewer into an Airtable register.
How it runs
The automated pipeline, trigger to output.
- TriggerMerge to default branchGitHub
- LogicDiff merged lockfile against parent
- ActionResolve new dependency licensesGitHub
- LogicEnrich with PR, commit, and approver
- OutputAppend rows to Airtable compliance registerAirtable
What it does
Maintains a permanent, queryable record of dependency provenance. Each time code merges, it captures the dependencies that just entered the main branch along with their licenses and who approved the PR, appending them to a compliance register.
When to use it
Use it when you need a defensible paper trail for license audits or due diligence — a single source of truth showing every package, its license, the merge commit, and the human accountable for letting it in.
How it works
- 1A GitHub push/merge event to the default branch fires the workflow.
- 2A logic step compares the merged commit's lockfile against its parent to find newly added dependencies.
- 3An action resolves each new package's license from registry metadata.
- 4A logic step enriches each record with the PR number, merge commit SHA, and approving reviewer.
- 5The output step appends one row per dependency to the Airtable compliance register.
Set it up
What you configure once, before turning it on.
- 1Connect GitHubRepos, issues, pull requests, actions.
- 2Connect AirtableBases, tables, views, automations.
- 3Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 4Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 5Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More Engineering workflows
Gate breaking API PRs behind downstream consumer acknowledgement
When a PR introduces a breaking contract change, comments the impact summary back on the PR, applies a blocking label.
Publish a versioned API changelog to Confluence on each release tag
On a new semver release tag, gathers the contract changes since the last release and writes a clean.
Agent reviews model-license fit and suggests compliant swaps on the PR
When a PR adds a Hugging Face model, an agent reads the model card and license, judges fit against your commercial-use policy.
Upgrade Impact Router to Module Code Owners
Maps a dependency-bump PR's affected modules to their CODEOWNERS, then DMs each owner on Slack with only the changelog slice that touches code they own.
Re-Voice IVR Prompts on Phone-Tree Config Merge
When a phone-tree config change merges in GitHub, regenerates the ElevenLabs audio for any prompt whose script changed in the diff and opens a follow-up PR adding the new audio…
Upstream Release to Notion Upgrade Brief
When a watched package publishes a new release, fetches the release notes, maps them to the internal modules that depend on it.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.
Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.