IT OPS

On-Demand Certificate Scan via Inbound Webhook

Accepts a webhook carrying one or more hostnames, immediately checks each certificate's expiry.

CategoryIT Ops
Enginesim
Difficultybeginner
Triggerwebhook
Steps5
Setup~5 min

How it runs

The automated pipeline, trigger to output.

  • TriggerInbound webhook delivers hostnames to scanHTTP webhook
  • ActionFetch and parse each host's cert expiryShell
  • LogicClassify each host ok / warning / critical
  • ActionPage PagerDuty for critical hostsPagerDutyPagerDuty
  • OutputReturn structured pass/fail verdict to callerHTTP webhook

What it does

Exposes a webhook endpoint that any system — a CI deploy step, a provisioning script, or a chatops command — can call with a list of hostnames. It checks the live TLS certificate for each, classifies expiry risk, and pages immediately on critical findings. The caller also gets a structured response it can act on.

When to use it

Use this for ad-hoc and pipeline-driven checks: validate a cert right after a deploy, gate a release on cert health, or let an engineer trigger a scan from a slash command without waiting for the next scheduled sweep.

How it works

  1. 1An inbound webhook delivers a JSON payload of hostnames to scan.
  2. 2A shell step fetches and parses each host's certificate expiry date.
  3. 3A logic step classifies each host as ok, warning, or critical by days remaining.
  4. 4Any critical host opens a PagerDuty incident with the originating caller context.
  5. 5The workflow returns a structured pass/fail result to the webhook caller as its output.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect HTTP webhookTrigger any URL on agent actions.
  2. 2
    Connect ShellRun sandboxed commands inside the workspace.
  3. 3
    Connect PagerDutyIncidents, on-call, escalations.
  4. 4
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  5. 5
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  6. 6
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.