e-volv

Compliance playbook

AccessReview

Monthly compliance scan of workspace members, integrations, service accounts, and valid tokens, routing flagged items through owner approval.

Monthly access review for compliance. Enumerates workspace members, connected integrations, service accounts, and valid API keys or tokens visible in the repository and configuration, flags inactive accounts, over-provisioned roles, and integrations with unused scopes, and routes each flagged item through an owner approval gate. Approved rejections are collected into a revocation-list ticket that records the decision and its maker. Configure the ticket integration on the Create Ticket step after importing.

Identifier
access-review
Version
1.0.0
Steps
4
Triggers
1
  • access
  • review
  • compliance
  • security
  • governance
  • automated

When it runs

Scheduleschedule.monthly
Schedule
Day 1 of each month at 09:00 UTC 0 9 1 * *
Timezone
UTC

The pipeline

The graph below is the one the workflow opens with in the builder — same steps, same layout, drawn on the same canvas. The run playing through it is a simulation; the branches and conditions are real.

React Flow
  1. 01
    Monthly Schedule (1st 09:00 UTC)trigger

    The event that starts the run.

  2. 02
    Enumerate Access & Flag Risksagent.run

    One agent works the task with its toolkit.

  3. 03
    Owner Approval — Revoke Flagged Accessapproval.gate

    Pauses the run until a human decides.

  4. 04
    Create Revocation List Ticketticket.create

    Opens a ticket on the connected tracker.

The agent

Access Reviewer

Base type
Senior Developer
Temperature
0.2
Max iterations
30
Tools
4

Filesystem · 1

  • read_fileRead File · read

Code search · 1

  • code_searchCode Search · read

Tickets · 1

  • create_ticketCreate Ticket · write

Status · 1

  • update_statusUpdate Status · write