Semgrep connector for Okou
Connect Semgrep AppSec Platform to inspect deployments, projects, findings, scans, secrets, and supply-chain data, and manage approved remediation workflows.
Engineering · Web API token
Use Semgrep in Okou
Semgrep AppSec Platform API for deployments, code and supply-chain findings, projects, scans, secrets, SBOM exports, triage, and Jira workflows.
Once connected, supported Semgrep actions can become steps in a reusable workflow alongside the other services your team uses. Run the workflow once, on a schedule, or when an event starts it.
What you can do with Semgrep
- Read the deployments available to the API token.
- Read code, supply-chain, and AI-powered detection findings.
- Update projects, Managed Scans, and project tags.
- Read Semgrep scan details and scan history.
- Read Semgrep Secrets findings.
- Create SBOM export jobs and retrieve their status or download URL.
- Read legacy Semgrep policy definitions and rules.
- Create Jira tickets for Semgrep findings.
How the Semgrep connector works
A connected service becomes one permissioned step in the work you hand off.
- 1
Connect Semgrep
Choose Web API token.
- 2
Choose the work
Use only the supported actions your workflow needs.
- 3
Run it your way
Start it once, schedule it, or attach an event trigger.
Connect Semgrep securely
Use the connection method that fits your account and grant only the access the workflow needs.
- Web API token
Connector access is controlled per service and per action, so a workflow does not need broader access than the work you ask it to do.
What Semgrep covers
The topics this connector's published operations touch.
- application security
- code scanning
- security findings
- static analysis
- supply chain security
- vulnerability management
Semgrep connector questions
- What can Okou do with Semgrep?
- Connect Semgrep AppSec Platform to inspect deployments, projects, findings, scans, secrets, and supply-chain data, and manage approved remediation workflows. Documented actions include: Read the deployments available to the API token. Read code, supply-chain, and AI-powered detection findings.
- How do I connect Semgrep to Okou?
- Connect Semgrep using Web API token. The connection controls which supported actions a workflow can use.
- Can Semgrep run in an automated workflow?
- Yes. After it is connected, supported Semgrep actions can run in reusable Okou workflows on demand, on a schedule, or from an event trigger.
More engineering connectors
Explore other connectors in the same product category.
Sentry
Connect your Sentry account to access error tracking and project data.
Semaphore CI
Connect Semaphore CI to inspect and manage workflows, pipelines, jobs, promotions, deployment targets, self-hosted agents, and organization access.
ServiceNow
Connect your ServiceNow instance to query and update incidents, change requests, the CMDB, and any other table via the Table API.
