Snyk

Snyk is a developer security platform for securing code, dependencies, containers, and infrastructure as code. It is a vulnerability scanner and automated vulnerability testing tool that monitors for misconfigurations or coding flaws that pose cybersecurity threats.

In order to integrate Snyk with Relyance AI you will need a Snyk Auth Token, Organization Ids (delimited by semicolons ';'), and Group Ids (delimited by semicolons ';').

In Snyk:

Obtain your Auth Token:

1. Login to your Snyk account.
2. From the homepage, select the user menu in the top-right, and from the drop down menu select Account settings.

3. On the account settings page you will be able to click the box shown to obtain your Auth Token:

4. Copy this key to be used in Relyance AI.

Obtain your Organization / Group IDs: (These will be important for extracting PI Data types from the instance.)

1. From the top menu select the gear icon.

2. From here you can select the Group and Organization Ids.

In the Relyance AI application:

1. Login to your Relyance account.
2. Navigate to the Settings Menu in the bottom left-hand side.
3. Select Integrations.
4. Click on the Vendor Integration tab.
5. Find the Snyk integration card and click it to open its connections.
6. Under Authentication Method, choose Custom.
7. Paste the Auth Token, Organization Ids, and Group Ids into their respective fields.

9. Click Authenticate.
10. At this point, you should see the following result on the Vendor Integrations page:

11. Congratulations, you are now connected to Snyk.

Manage this integration with Terraform

Connections for this integration can be managed as code with the Relyance Terraform provider. Non-secret fields go in auth.params; secret fields go in auth.secrets_wo, which is write-only — never stored in Terraform state. Rotate secrets by bumping auth.secrets_wo_version.

resource "relyance_integration_connection" "snyk" {
  vendor = "snyk"
  name   = "<your connection name>"

  auth = {
    method = "access-token"
    params = {
      data_storage_location = "us"
    }
    # Secret fields are write-only: sent to Relyance, never stored in state.
    secrets_wo = {
      auth_token = var.snyk_auth_token
    }
    secrets_wo_version = 1
  }

  scans = { "data-inspection" = { enabled = true } }
}