Automate Snyk

What Snyk is

The Snyk API is available to customers on [Business and Enterprise plans](https://snyk.io/plans) and allows you to programatically integrate with Snyk. ## REST API We are in the process of building a new, improved API (`https://api.snyk.io/rest`) built using the OpenAPI and JSON API standards. We welcome you to try it out as we shape and release endpoints until it, ultimately, becomes a full repla

API host: api.snyk.io

What HumDay can do in Snyk

67 documented operations change something in Snyk. The 65 most useful are listed here.

• POSTCreate a new organization/org
• POSTGet list of issues/reporting/issues/
• POSTGet issue counts/reporting/counts/issues
• POSTGet list of latest issues/reporting/issues/latest
• POSTInvite users/org/{orgId}/invite
• POSTCreate a webhook/org/{orgId}/webhooks
• PUTModify organization notification settings/user/me/notification-settings/org/{orgId}
• POSTAdd new integration/org/{orgId}/integrations
• POSTTest package.json & package-lock.json File/test/npm
• POSTTest requirements.txt file/test/pip
• POSTTest sbt file/test/sbt
• POSTTest package.json & yarn.lock File/test/yarn
• POSTGet latest issue counts/reporting/counts/issues/latest
• POSTTest maven file/test/maven
• POSTTest gradle file/test/gradle
• POSTTest composer.json & composer.lock file/test/composer
• POSTTest vendor.json File/test/govendor
• POSTTest gemfile.lock file/test/rubygems
• POSTTest Gopkg.toml & Gopkg.lock File/test/golangdep
• POSTList all licenses/org/{orgId}/licenses
• POSTList all projects/org/{orgId}/projects
• DELETEDelete pending user provision/org/{orgId}/provision
• POSTProvision a user to the organization/org/{orgId}/provision
• POSTList all dependencies/org/{orgId}/dependencies
• PUTSet notification settings/org/{orgId}/notification-settings
• PUTModify project notification settings/user/me/notification-settings/org/{orgId}/project/{projectId}
• POSTTest Dep Graph/test/dep-graph
• POSTMonitor Dep Graph/monitor/dep-graph
• POSTList all Aggregated issues/org/{orgId}/project/{projectId}/aggregated-issues
• DELETERemove organization/org/{orgId}
• DELETEDelete a webhook/org/{orgId}/webhooks/{webhookId}
• POSTGet test counts/reporting/counts/tests
• POSTGet project counts/reporting/counts/projects
• PUTUpdate organization settings/org/{orgId}/settings
• PUTUpdate group settings/group/{groupId}/settings
• POSTAdd a member to an organization within a group/group/{groupId}/org/{orgId}/members
• POSTAdd a tag to a project/org/{orgId}/project/{projectId}/tags
• POSTPing a webhook/org/{orgId}/webhooks/{webhookId}/ping
• POSTList all project snapshots/org/{orgId}/project/{projectId}/history
• POSTGet latest project counts/reporting/counts/projects/latest
• POSTDelete tag from group/group/{groupId}/tags/delete
• POSTCreate jira issue/org/{orgId}/project/{projectId}/issue/{issueId}/jira-issue
• POSTList all project snapshot aggregated issues/org/{orgId}/project/{projectId}/history/{snapshotId}/aggregated-issues
• DELETERemove a member from the organization/org/{orgId}/members/{userId}
• PUTUpdate a member in the organization/org/{orgId}/members/{userId}
• DELETEDelete a project/org/{orgId}/project/{projectId}
• PUTUpdate a project/org/{orgId}/project/{projectId}
• PUTUpdate existing integration/org/{orgId}/integrations/{integrationId}
• POSTAdd ignore/org/{orgId}/project/{projectId}/ignore/{issueId}
• POSTProvision new broker token/org/{orgId}/integrations/{integrationId}/authentication/provision-token
• PUTUpdate a member's role in the organization/org/{orgId}/members/update/{userId}
• PUTMove project to a different organization/org/{orgId}/project/{projectId}/move
• POSTActivate/org/{orgId}/project/{projectId}/activate
• DELETEDelete project settings/org/{orgId}/project/{projectId}/settings
• PUTUpdate project settings/org/{orgId}/project/{projectId}/settings
• POSTApplying attributes/org/{orgId}/project/{projectId}/attributes
• POSTDeactivate/org/{orgId}/project/{projectId}/deactivate
• POSTClone an integration (with settings and credentials)/org/{orgId}/integrations/{integrationId}/clone
• POSTImport targets/org/{orgId}/integrations/{integrationId}/import
• PUTUpdate/org/{orgId}/integrations/{integrationId}/settings
• DELETEDelete credentials/org/{orgId}/integrations/{integrationId}/authentication
• POSTRemove a tag from a project/org/{orgId}/project/{projectId}/tags/remove
• DELETEDelete ignores/org/{orgId}/project/{projectId}/ignore/{issueId}
• PUTReplace ignores/org/{orgId}/project/{projectId}/ignore/{issueId}
• POSTSwitch between broker tokens/org/{orgId}/integrations/{integrationId}/authentication/switch-token

What HumDay can read from Snyk

These are the operations a schedule or a trigger can watch.

• GETList all the organizations a user belongs to/orgs
• GETGet My Details/user/me
• GETGet User Details/user/{userId}
• GETList pending user provisions/org/{orgId}/provision
• GETGet organization notification settings/user/me/notification-settings/org/{orgId}
• GETList Members/org/{orgId}/members
• GETList all organizations in a group/group/{groupId}/orgs
• GETList all tags in a group/group/{groupId}/tags
• GETList webhooks/org/{orgId}/webhooks
• GETList all roles in a group/group/{groupId}/roles
• GETList all members in a group/group/{groupId}/members
• GETList all entitlements/org/{orgId}/entitlements
• GETList/org/{orgId}/integrations
• GETGet organization notification settings/org/{orgId}/notification-settings
• GETGet project notification settings/user/me/notification-settings/org/{orgId}/project/{projectId}
• GETList all jira issues/org/{orgId}/project/{projectId}/jira-issues
• GETRetrieve a webhook/org/{orgId}/webhooks/{webhookId}
• GETTest for issues in a public package by name and version/test/npm/{packageName}/{version}
• GETTest for issues in a public package by name and version/test/pip/{packageName}/{version}
• GETTest for issues in a public gem by name and version/test/rubygems/{gemName}/{version}
• GETView organization settings/org/{orgId}/settings
• GETView group settings/group/{groupId}/settings
• GETList all ignores/org/{orgId}/project/{projectId}/ignores
• GETList project settings/org/{orgId}/project/{projectId}/settings
• GETList all project issue paths/org/{orgId}/project/{projectId}/issue/{issueId}/paths
• GETTest for issues in a public package by group, name and version/test/gradle/{group}/{name}/{version}
• GETTest for issues in a public package by group id, artifact id and version/test/sbt/{groupId}/{artifactId}/{version}
• GETTest for issues in a public package by group id, artifact id and version/test/maven/{groupId}/{artifactId}/{version}
• GETGet existing integration by type/org/{orgId}/integrations/{type}
• GETRetrieve a single project/org/{orgId}/project/{projectId}
• GETGet an organization's entitlement value/org/{orgId}/entitlement/{entitlementKey}
• GETGet Project dependency graph/org/{orgId}/project/{projectId}/dep-graph
• GETRetrieve/org/{orgId}/integrations/{integrationId}/settings
• GETList all project snapshot issue paths/org/{orgId}/project/{projectId}/history/{snapshotId}/issue/{issueId}/paths
• GETRetrieve ignore/org/{orgId}/project/{projectId}/ignore/{issueId}

How automating Snyk works

1. Describe the outcome. Say what you want to happen, in your own words. No node graphs, no field mapping.
2. Approve the contract. HumDay writes down exactly what it will do, what it will touch, and what it will never do. You approve it before anything is built.
3. See it proven. The program runs and shows you the result before it is allowed near your live Snyk account.
4. Grant access, then go live. You approve the specific Snyk operations it may use — and only those.

Popular Snyk integrations

Connect Snyk to the tools people pair it with most.

• Snyk and OData for namespace microsoft.graphintegration
• Snyk and Cloudflareintegration
• Snyk and NetBoxintegration
• Snyk and GitHubintegration
• Snyk and Mistintegration
• Snyk and Loket.nlintegration
• Snyk and Atlassian The Jira Cloud platformintegration
• Snyk and Magento B2Bintegration
• Snyk and Stripeintegration
• Snyk and Zuora Reference Billingintegration
• Snyk and bunqintegration
• Snyk and DocuSignintegration

Automate Snyk with these

• OData for namespace microsoft.graph11412 operations
• GitHub811 operations
• Atlassian The Jira Cloud platform474 operations
• Gitlab358 operations
• JIRA 7.6.1324 operations
• Appcenter App Center Client323 operations
• Gitea .321 operations
• Bitbucket292 operations
• Keycloak Admin281 operations
• Apple App Store Connect251 operations
• Files.com222 operations
• Vmware vRealize Network Insight Reference161 operations

Categories

• Developer tools

Questions about Snyk automation

Can HumDay connect to Snyk?

Yes. HumDay reads Snyk's own published API description and derives the operations from it, so there is no hand-built connector to wait for. 103 operations are documented.

Do I need to write code to automate Snyk?

No. You describe the outcome you want in plain words. HumDay agrees a contract with you, writes the program, and shows you a test run before anything touches your Snyk account.

What can HumDay do in Snyk?

67 of the 103 documented operations change something in Snyk, and 36 read from it. HumDay only ever uses the specific operations your approved contract needs.

Is my Snyk account safe?

Your credentials are stored encrypted and are never shown in chat, code, or logs. Every run is limited to the operations you explicitly approved, and anything that writes to Snyk is held behind that approval.

Where this came from

The operations above are read from a published API description for Snyk at snyk.docs.apiary.io/api-description-document. Descriptions are the provider’s own words, not ours. Last published 2023-03-06.