Skip to main content

Semgrep - User Guide

In this article, you will understand step by step how to easily integrate Scytale with Semgrep

Semgrep is a static analysis tool that helps developers find and fix security vulnerabilities and code issues using customizable rules across multiple languages.

Required Permissions

Semgrep API token with Agent CI and Web API scopes enabled, granting read access to:

  • Deployments

  • Projects

  • Findings

Scytale follows the least-privilege principle, limiting permission scopes strictly to what's required for audit evidence collection.

How to Connect

  1. In Scytale, go to 'Integrations'.

  2. Search for Semgrep and select 'Connect'.

  3. Paste your API token.

  4. Add a connection name — this will be used to differentiate between your connections — and then select 'Connect'.

You have now successfully connected to Semgrep.

How to Create an API Token in Semgrep

  1. Admin logs in to https://semgrep.dev

  2. Navigate to Settings → Tokens → API Tokens

  3. Click Create API Token → give it a descriptive name (e.g. "Scytale Integration")

  4. Enable the Web API scope and Agent (CI) scope (critical — without it, API calls return 404)

  5. Copy the token (shown only once) and paste it into the integration connection form

  6. System validates the token via GET /deployments

  7. System stores the encrypted token; deployment slug is fetched dynamically for subsequent calls

Related Articles
Vercel - User Guide
SentinelOne - User Guide
Anthropic - User Guide
V0 - User Guide
Splunk -User Guide
Did this answer your question?