Snyk integration

In short

Read organisations, projects and their security issues. Connect it on the Integrations page; your app then calls Snyk through Sapilon without ever holding a Snyk credential.

Lets your app list the Snyk organisations and projects your token can see, and read their open security issues.

Connecting

On the Integrations page choose Connect on Snyk and fill in:

Region — api for the US, api.eu for EU, api.au for Australia.
API token — Snyk → Account settings → API token, or a service account token from your organisation settings.

Sapilon checks the key with the provider before it saves it, and stores it encrypted; it is never shown again.

What your app can do

Only these requests are available; anything else is refused.

GET /rest/self
GET /rest/orgs
GET /rest/orgs/*/projects
GET /rest/orgs/*/projects/*
GET /rest/orgs/*/issues

How the agent uses it

Use integrations.request('snyk', …); paths are relative to https://api.snyk.io.

Every call needs query: { version: '2024-10-15' }.

GET /rest/self, GET /rest/orgs.
GET /rest/orgs/{orgId}/projects, GET /rest/orgs/{orgId}/projects/{projectId}.
GET /rest/orgs/{orgId}/issues — Example: { method: 'GET', path: '/rest/orgs/1a2b/issues', query: { version: '2024-10-15', 'effective_severity_level': 'critical,high', limit: '50' } }.

Pages continue at links.next. Read-only.