Snyk

Set up Snyk for automated tests with TrustCloud

Purpose

Once you set up your compliance program, TrustCloud TrustOps works to ensure that your systems remain compliant with your adopted controls. To do so, TrustCloud runs automated tests against systems in your product and business stack, retrieves inventories, and verifies that they are properly configured.

This document outlines the steps you can take to grant TrustCloud access to only read from your Snyk project***,*** so that TrustOps can validate and generate evidence for your compliance program.

Instructions to grant TrustCloud limited access to Snyk data

1. Log into Snyk with a user who is an owner of your Snyk organization.
2. In the upper-right corner of any page, click the gear icon.
3. Find the section Organization ID. Copy the Organization ID to your clipboard, and paste it in the configuration settings in TrustOps.
4. Under Organization API key, select Manage Service Accounts.
5. Select Create Service Account. Give the service account a unique name.
6. Select Viewer for the Role and click Create.
7. The token is generated and displayed. Make sure you copy it as you won’t see it again. Paste this token into the integration configuration screen in TrustOps.