Summary
The Snyk plugin imports repository vulnerability data from Snyk server into HCL Accelerate. It scans for existing GitHub, Gitlab, or BitBucket integrations and retrieves data only for those particular repositories. The Plugin works on organisational level and imports data for entire organisation. It can import data from multiple organisations.
Compatibility
This plugin is compatible with HCL Accelerate version 2.4.x or later. The plugin works on top of GitHub, Gitlab, or BitBucket Plugin so at least one integration should be already there .
Usage
To use the Snyk plugin, the plugin must be loaded only if you have an existing GitHub, GitLab, or BitBucket integration . The Snyk data is imported only if Snyk scan is performed on the repositories .
Integration type
The Snyk plugin supports scheduled event integration which are listed in the following table.
Scheduled events
| Name |
Description |
|
SyncSnykDataEvent
|
Queries the Snyk data for the organisation. |
Integration
The method to integrate the plugin:
The tables in the Configuration properties topic describe the properties used to define the integration.
Using the user interface
- From the Plugins page, click Settings > Integrations > Plugins.
- Under the Action column for the plugin, click Add Integration.
- On the Add Integration page enter values for the fields used to configure the integration and define communication.
- Click Save.
Configuration Properties
The following tables describe the properties used to configure the integration.
- The General Configuration Properties table describes configuration properties used by all plugin integrations.
- The Snyk Plugin Configuration Properties table describes the Snyk configuration properties that define the connection and communications with the Snyk server.
Some properties might not be displayed in the user interface, to see all properties enable the Show Hidden Properties field.
General Configuration properties
| Name |
Description |
Required |
Property Name |
| Integration Name |
An assigned name to the value stream. |
Yes |
name |
| Logging Level |
The level of Log4j messages to display in the log file. Valid values are: all, debug, info, warn, error, fatal, off, and trace. |
No |
loggingLevel |
| HCL Accelerate User Access Key |
An auto-generated user access key provides credentials for communicating with the HCL Accelerate server. |
Yes |
NA |
Snyk Plugin Properties
| Name |
Type |
Description |
Required |
| Personal Access Token |
String |
The token to use to authenticate with the Snyk server. |
Yes |
|
Organisation IDs
|
String |
At least one Snyk organisation ID should be provided . For adding multiple IDs , separate IDs by a line . |
Yes |
|
Project Names
|
String |
Add Snyk project names to run plugin for specific projects (line separated) . By default it will get data for all projects in the organisation . |
No |
Summary
Usage
Configuration Properties
