feat(snyk): new Snyk appsec-posture integration

Snyk API v1 + REST, 5 commands: list/get projects, list project issues, list org issues. API-token auth, stdlib-only. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-12 15:18:48 +02:00
parent bc100eef67
commit 83c1736d47
6 changed files with 329 additions and 0 deletions
@@ -0,0 +1,66 @@
+id: snyk
+name: Snyk
+version: 1.0.0
+description: "Snyk (API v1 + REST) — application security posture: list and read projects, list a project's aggregated issues, and list all issues for an organization. API-token authentication; stdlib-only, no extra Python dependencies."
+changelog: "1.0.0 — Initial release: list/get projects, list project issues, list org issues."
+category: devsecops
+
+# Per-instance configuration. Auth header 'Authorization: token <token>'.
+config_schema:
+  properties:
+    token:
+      type: string
+      description: "Snyk API token"
+      x-soar-sensitive: true
+    org_id:
+      type: string
+      description: "Snyk organization ID"
+  required:
+    - token
+    - org_id
+
+commands:
+  - id: list_projects
+    name: snyk-list-projects
+    description: "List projects in the organization."
+    risk: read
+    inputs_schema:
+      properties: {}
+      required: []
+    outputs_schema: { properties: {} }
+  - id: get_project
+    name: snyk-get-project
+    description: "Get a single project by ID."
+    risk: read
+    inputs_schema:
+      properties:
+        project_id: { type: string, description: "Project ID" }
+      required: [project_id]
+    outputs_schema: { properties: {} }
+  - id: list_project_issues
+    name: snyk-list-project-issues
+    description: "List a project's aggregated issues."
+    risk: read
+    inputs_schema:
+      properties:
+        project_id: { type: string, description: "Project ID" }
+      required: [project_id]
+    outputs_schema: { properties: {} }
+  - id: list_org_issues
+    name: snyk-list-org-issues
+    description: "List all issues across the organization."
+    risk: read
+    inputs_schema:
+      properties:
+        limit: { type: number, description: "Max issues (default 50)" }
+      required: []
+    outputs_schema: { properties: {} }
+
+  - id: test_connection
+    name: snyk-test-connection
+    description: "Verify the token (used by the Test button)."
+    risk: read
+    inputs_schema:
+      properties: {}
+      required: []
+    outputs_schema: { properties: {} }