Slack app

Snyk recommends that all customers use the Snyk Slack app, as the Slack integration is outdated.

The Snyk app for Slack is built as an official Slack App.

The Slack app provides the following benefits and more:

Improved support for Snyk products: Open Source, Code, Container, and IaC
Support for filtering on severity levels
Support for overriding notifications at the Project level

Overview of the Snyk app for Slack

The Snyk app for Slack highlights newly disclosed vulnerability information across your software from imported Projects and presents actionable context within your Slack workspace channels. Your teams get the issue notifications that matter the most and can act on them without leaving Slack.

This has the advantage of:

Enhancing collaboration to discuss and resolve vulnerabilities quickly
Maintaining awareness of relevant and emerging vulnerabilities
Minimizing disruptions with issue notification thresholds

The Snyk app for Slack is based on Snyk Apps, providing you with the benefit of more granular scopes and more ability to configure issue notifications at the Organization and Project levels.

Vulnerabilities detected on initial import of Projects are not sent to Slack. Only newly disclosed vulnerabilities from imported Projects are sent to Slack.

Enable the Snyk app for Slack

To enable the Snyk app for Slack, you must do the following:

Authorize the app with Snyk to get new issues data that can be forwarded to your Slack workspace.
Authorize the app with your Slack workspace to allow Snyk to send notifications to your channels in the workspace.
Configure the default notification settings in Snyk for all Projects in your Organization and add Project-level notification overrides if you would like.

Configure the Snyk app for Slack

Ensure the user performing this installation has the permission Snyk Apps Management - Install Apps before continuing. See documentation for member roles.

Open the Snyk integrations page, navigate to Notifications, and click the Slack App tile:

This launches the authorization flow, allowing Snyk access to your Snyk app for Slack:

After Snyk has been authorized, you will be asked to authorize Slack to connect to Snyk for Slack. Click Allow.

If multiple Slack workspaces are available, a dropdown will be visible at the top right of the page. Select the desired Slack workspace.

After this step is complete, you can configure the integration to provide a Slack channel ID for the channel where issue notifications for the Organization are sent, and also filter by severity level.

To find the channel ID of a Slack Channel, open Slack, right-click on the channel name, select View channel details, then scroll down to the bottom of the window where you will see the channel ID, for example, C2TB2222N.

To add the Snyk for Slack app to a private channel, you must first add the app manually to the channel from within Slack and then select the channel within the Snyk integration. In the Private channel, select Channel settings - Integrations, and then Add an app. Search for Snyk for Slack and select add. After you have done this, the channel is displayed on the Settings page for the integration.

If you are a Slack Admin, you can manually add the Snyk for Slack app to a private channel. To do this, type @Snyk for Slack in the chosen channel to summon the setup bot.

Issue notifications

After the Slack app has been configured, new issue notifications are forwarded to the selected Slack channel according to the desired severity level threshold. New issue notifications may take up to an hour to start propagating to your Slack workspace after it is configured.

Manage Project-level notification overrides

To override Slack notification settings for a Project, use the customizations table.

Find your Project ID

To set a Project level override, find the ID of the Project for which you want to send notifications.

Navigate to the Projects page using the application sidebar.
Select the desired Project.
Copy the UUID value that follows the project/ path in the URL bar.

Add notification customizations

Select Add customization to open the creation dialog from the Slack App integration page.
Paste your previously copied Project ID value.
Select the desired issue severity level and the Slack channel to target.
Save the customization.

Edit or delete notification customizations

After a notification customization has been created, you can edit its configuration or delete it at any time. To do so, select the action in the ellipsis menu for the customization table entry.

Manage notification customizations using the REST API

To override Slack notification settings on a per-Project basis, you can use a set of Snyk REST API endpoints.

Before attempting to use these endpoints, ensure that you have retrieved your authentication token and Organization ID (org_id) as outlined in the steps of the guide for getting started using Snyk REST API.

Prerequisites for managing Project-level notification overrides

Find the Slack App Bot ID

To interact with the Project-level notification customization endpoints, you must have a bot_id. You can obtain it with a request to the Get a list of apps installed for an organization endpoint.

GET /orgs/{org_id}/apps/installs

Ensure you apply the expand=app query string on your request. This enables you to find the Bot for the related Snyk App named Slack App.

Find your Project ID

To target the desired Project, you must have its project_id. This can be obtained with a GET request to the List all Projects for an Org endpoint:

GET /orgs/{org_id}/projects

Relevant REST APIs

After retrieving the org_id, bot_id, and project_id values, you can use the following create, read, update, and delete API operations:

Remove the Snyk app for Slack

To remove the Snyk app for Slack, navigate to the settings page, locate Remove Slack Snyk app at the bottom of the page, and click the Disconnect Slack button:

PreviousJira integration NextSlack integration

Last updated 1 month ago