Snyk Scan Targets
Fetches detailed information about specific entities within your organization that Snyk monitors for vulnerabilities. Collects data such as target IDs, creation dates, display names, and resource URLs
Sync Type: Incremental
Requirements
- You can follow the steps outlined in Snyk's documentation to create a Snyk service account.
- The role you will select depends on which Snyk level you are connecting at:
- If connecting at the Snyk group level, select the Group Admin role.
- If connecting at the Snyk organization level, select the Org Admin role.
- For the name of the account, we recommend Monad Service.
- Once you have successfully created the service account, be sure to copy the token that Snyk generates. Make sure to save this token to your secrets tool or password manager before you navigate away from the page, since it will not be displayed again.
Details
Monad uses the created_gte filter on the API to fetch targets per organization. After each successful sync, Monad resumes from the latest target created_at it has collected for that organization. If this is the first sync, Monad starts from the Backfill Start Time.
Note: To avoid missing targets that Snyk makes visible shortly after they are created, each sync only collects targets created more than 5 minutes ago. Newer targets are picked up by a later sync, so they arrive up to about 5 minutes later than they are created in Snyk.
Configuration
The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.
Settings
| Setting | Type | Required | Description |
|---|---|---|---|
| Backfill Start Time | string | No | The date to start fetching data from. If not specified, no past records will be fetched. |
| API Rate Limit | object | No | Optional limit on the connector's outbound request rate to the source API. Leave blank to use the connector's default behavior. See API Rate Limiting for the field format, limits, and how to choose a value. |
Secrets
| Secret | Type | Required | Description |
|---|---|---|---|
| API Key | string | Yes | API Key for the Synk API. This is required to authenticate requests. |
Related Articles
- https://docs.snyk.io/snyk-admin/structure-account-for-high-application-performance/service-accounts
- https://docs.snyk.io/snyk-api/reference/targets
Sample Record
Code
Sync frequency
This input polls approximately every 10 seconds, with each sync beginning after the previous one completes. See Input Sync Frequency for details.
Community transforms
The Monad Transforms Repository has ready-made transforms for this input. Import one into your organization, then add it to a pipeline after this input.
| Format | Transform |
|---|---|
| OCSF v1.9.0 | Snyk Scan Targets to OCSF v1.9.0 |
| ECS v9.5.0 | Snyk Scan Targets to ECS v9.5.0 |
| CEF | Snyk Scan Targets to CEF |
CEF transforms emit an intermediate record; add the CEF Serializer transform after one to produce the CEF:0 string.