rocketkind
DevTools

Semgrep

Semgrep scans code for security problems and collects the results in the Semgrep AppSec Platform — Code (SAST) findings, Supply Chain issues, and leaked secrets.

Authentication

  • API token

Actions

Generic API request. Call any Semgrep API endpoint on this connection, for the case where no shipped action covers it yet. The connection supplies the base URL, the authentication and the egress route, so only the path and query are yours to fill.

  • Get projectRetrieve details for a single project in a deployment (GET /deployments/{deploymentSlug}/projects/{projectName}).
  • List deploymentsList the deployments the API token can access (GET /deployments).
  • List findingsList code, supply-chain, or AI-powered scan findings in a deployment (GET /deployments/{deploymentSlug}/findings).
  • List projectsList the projects scanned or onboarded to Managed Scans in a deployment (GET /deployments/{deploymentSlug}/projects).
  • List secretsList Semgrep Secrets findings for a deployment (GET /deployments/{deploymentId}/secrets).

Triggers

  • New findingStarts when a new finding is detected in the selected Semgrep deployment.
  • New finding (webhook)Starts when Semgrep AppSec Platform reports a new Semgrep Code (SAST) finding for a scan, delivered by a webhook instead of polling the findings list.
  • New secret findingStarts when Semgrep Secrets detects a new exposed secret in the selected deployment.

Product names, logos and brands are the property of their respective owners and are used here for identification only. Their use does not imply endorsement by, or affiliation with, those owners.