Integrate with Snyk

Integrations for Snyk

Many integrations are available for using third-party functionality within Snyk and using Snyk with other tools. See SCM, IDE, and CI/CD workflow and integrations for information on integrations and other methods of accomplishing that workflow.

This page identifies additional Snyk integrations and where to find them.

Snyk provides plugins for repository gatekeepers and integrations to connect with package repositories:

• Gatekeeper plugins

• Package repository integrations

There are integrations that support Snyk Container.

Integrations for event forwarding allow you to push Snyk platform events directly to certain products on other platforms, enabling you to set up custom alerting, build your own reporting, trigger automation, and more.

Notification and ticketing systems integrations help you work with Snyk in Jira and Slack.

Information is also provided on how Snyk can work with vulnerability management tools.

Snyk provides alternative reporting tools. For more information, see Reporting and BI integrations.

Integrations for Snyk AppRisk

The Integrations page shows all active integrations, including any data automatically synced from your existing Snyk Organizations, and provides access to the Integration Hub.

The following supported Snyk data are automatically synced: Snyk Open Source, Snyk Code, Snyk IaC, Snyk Container.

Navigate to the Third-party integrations for Snyk AppRisk to check all available integrations and their setup details.

Each connected integration enables you to pause data syncing, modify integration profiles and configurations, delete the integration, or check when the integration was last synced and when the next sync is scheduled.

Integrations syncing time

Depending on the type of action, the syncing times might differ:

• Commits - 6 hours

• Get repository list - 6 hours

• Enrich repository - daily

• Sync repository (archive old or deleted repositories) - weekly

• Get organization chart - weekly

Integration connection statuses

After you finish setting up an integration, you can see the following connection statuses:

• Setup in progress

• Connected

• Connection failed

• x profile(s) connected

• x/y profile(s) connected

• x profile(s) failed

If you encounter any of the failed statuses, check the Connection failure details list available on the integration card.

Integration card - Connection failure details list

Snyk AppRisk integrations ecosystem

You can refer to the table below to verify the availability and compatibility of all integrations for Snyk AppRisk. The integrations are categorized by type, listed by name, and indicated as available or not for both Snyk Essentials and Snyk AppRisk.

Integration type	Integration name	Snyk Essentials	Snyk AppRisk
SCM	GitHub BitBucket GitLab Azure DevOps	✔️	✔️
Dev portals and Service catalogs	Backstage catalog ServiceNow CMDB Atlassian Compass Harness OpsLevel Datadog Org Context (Service Catalog)	✔️	✔️
Risk management collaboration	Slack Email	✔️	✔️
AST	NightFall GitGuardian	✖️	✔️
Runtime security and observability	Snyk runtime sensor Sysdig Dynatrace	✖️	✔️

Using the Integration Hub

Use the Integration Hub page to onboard integrations and populate Snyk Essentials with data from SCM tools.

You can add an integration by following these steps:

1. Navigate to the Integrations page at the Group level.

2. Click Integration Hub.

3. Click Add on the integration you want to connect.

4. Configure your connection and click Done.

See the Snyk SCM integrations page or the Third-party integrations for Snyk AppRisk page for step-by-step details about how to set up an integration.

After the integration is validated, a card is displayed on the Integrations page, allowing you to enable or disable the connection, edit the settings, or remove the connection from your configuration.

Integration card - Integration status

Using Snyk Broker

If your SCM instance is not publicly accessible, you need Snyk Broker. You can install and configure your Snyk Broker using Docker or Helm. For more information about Snyk Broker, see the Snyk Broker documentation, including Snyk Broker.

Enable the Snyk Essentials flag in your Snyk Broker deployment environment before running the commands.

• GitHub - install and configure Snyk Broker

  • using Docker

  • using Helm

  • environment variables

• GitHub Enterprise - install and configure Snyk Broker:

  • using Docker

  • using Helm

  • environment variables

• BitBucket - install and configure Snyk Broker:

  • using Docker

  • using Helm

  • environment variables

• GitLab - install and configure Snyk Broker:

  • using Docker

  • using Helm

  • environment variables

• Azure - install and configure Snyk Broker:

  • using Docker

  • using Helm

  • environment variables

You can find on GitHub all the updated .json files that include the allowed list of accessible endpoints for the integrations.