Snyk App (OAuth2) Instructions

Instructions on how to onboard a Snyk Integration

Snyk App

Leen supports Snyk integrations via OAuth2 for both Snyk US, Snyk US-2, and Snyk EU. To integrate with Snyk, users will have to authorize Leen’s Snyk app. This will allow Leen to access the appropriate Snyk resources in your account. Leen takes care of the OAuth2 code-flow and access token management, so you don’t have to worry about it.

Snyk currently does offer their V1 API in the EU region. If you are an EU customer, you may experience slight degradation in Leen’s data mappings when compared to the US. Here are all the fields that Leen will not be able to map for EU customers:

• package_name
• package_version
• platform
• publication_time
• is_patchable
• cvss_score
• remediation

Onboarding

Follow the steps below to onboard a user to our Snyk Integration.

1. Create Snyk Connection

   With your Leen API Key and your Customer’s Org ID, make a API request to create a new Snyk Connection. More information can be found on the API Reference page.

   Example POST body and response

       {
         "vendor": "SNYK",
         "base_url": "https://api.us.snyk.io", //n OPTIONAL: only needed for US-2 and EU regions
       }
   

   The response will look like this:

   {
     "id": "e73fd0f2-9c4a-4911-923a-c07a3a3fa414",
     "vendor": "SNYK",
     "refresh_interval_secs": 14400,
     "timeout_secs": 1800,
     "organization_id": "5718a24d-f9c8-4276-af80-088ac433e28f",
     "oauth2_authorize_url": "https://app.snyk.io/oauth2/authorize?....."
     }
   

2. Redirect User to Snyk

   Redirect the user to the oauth2_authorize_url from the previous step in a new tab. This will prompt the user to authorize Leen’s Snyk app to access their Snyk resources.

   

   Once the user has authorized the app, they will be redirected to Leen on a successful authorization.

   
3. Pull Data

   Now that the user has authorized the app, you can pull data from Snyk using the connection_id from the first step. More information can be found on the API Reference page.