Seemplicity Integrations

Snyk

Snyk is an Application Security Platform that:

Integrating with Synk enables you to receive Snyk findings via the Seemplicity Platform.

This topic provides instructions for ingesting findings from Snyk.

Prerequisites

Before starting the process, ensure you've fulfilled the Snyk prerequisites in the "Service accounts" topic of the Snyk User Docs.

Follow the most up-to-date procedure here.

In Snyk, go to the relevant group and organization that you want to manage.
Click Settings > Service accounts to view existing service accounts and their details.
Click Create a service account to create a new one.
In the Service Account name field, enter a unique name for this token. Note this name can be used only once for tokens in the same area, either for an Organization or a Group.
From the Role dropdown list, select Viewer.
Click Create.
Copy and save the token. Once you navigate away from the page, the token will no longer be available.

In Seemplicity, go to Settings > Integrations - Data Sources > Snyk > Integrate.
In the Name field, enter a descriptive name for this instance.
In the API Token field, enter the information you were provided when you generated the access key in the previous procedure.
(Optional) From the **Region dropdown**, select the region from which you're connecting.
From the Scoring dropdown, select which method you want to use for issues ingested from Snyk. You can choose between CVSSv3 Base Score, Snyk Severity Score (scored 0-10) or Snyk Priority Score (scored from 0-1000) (learn more about the Snyk Priority Score).
In the data field, enter the number of days to collect data.
Select the relevant checkbox to collect **IAC Issues**, **Code Issues**, and/or **Cloud Configuration Issues.**
In the Collection Settings, select the enabled toggle, when to collect data (daily or weekly), and time.
In the Automatic Resolution Settings, enter values (in number of days) for Last Reported Time and Last Collected Time.

10. When finished, select Save.