Synk Application Security

Snyk Application Security platform helps organizations find, fix, and monitor vulnerabilities in their code, dependencies, containers, and infrastructure. More information can be found at Snyk documenatation.

Integration Method: API

Tables: Compliance Finding (2003), Vulnerability Finding (2002), Detection Finding (2004)

This integration supports the following events

This integration supports the following versions

Prerequisites

• The user should have access to Snyk Application.

• The user should have access to the DataBee console.

Configuration Overview

1. Create API Token from Snyk console

2. Add the Snyk data feed integration in the DataBee console with the required token.

   DataBee Parameter	Snyk Parameter
   Token	API Token
   Organization Id	Organization ID

Snyk Configuration

1. Log in to the Snyk console.

   
   
   

2. Navigate to the bottom left corner of the profile and click on it.
    

3. Select Account settings.
    

4. If you already have a token created, you will see a timestamp under CREATED title to indicate when the API Token was created. To view the token, click on click to show button.
    

5. Once the API Token becomes visible, copy and store it somewhere safe as it will be required while onboarding the data feed in DataBee.
    

6. If you don't have a token, create a new one by clicking Revoke and Regenerate button and follow the above-mentioned steps 4 & 5 to copy it.
    

7. Copy the API token from the box under the KEY. We also need the Organization ID of your Snyk account. To get it, Navigate to Settings under ORGANIZATION from the left side panel. 
    

8. Under Organization ID section, you can find the organization ID of your Snyk account and click on Copy button to copy it and store somewhere as it will be required later.
    

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    
   

2. Search for the Snyk Application Security and click it as shown below.
    
   

3. Click on the API Ingest option for collection method.
    

4. Enter feed contact information and click Next.
    
   

5. In the configuration page, confirm the following:

   • Authorization Method: Bearer Token

   • API Base URL: this is the base URL that DataBee will interact with.

   • Token: paste the API token.

   • Organization Id: paste the Organization ID.

   • Event types: preselected for all the event types that integration pulls.

   

6. Click Submit

Troubleshooting Tips

• Ensure the API token is pasted correctly. Paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.