Semgrep

What it covers

AppSec: source code is scanned for security issues (SAST).

Credential to create

Semgrep API token

Create a Semgrep token

Permissions to grant

• Reads the organization's deployments

Setup steps

1. Create an API token in Settings > Tokens.
2. Paste the token on the Integrations page.

Notes and gotchas

• A read token is sufficient; the connector confirms SAST scanning is active.