Snyk

Set up Snyk for automated tests with TrustCloud

Purpose

Once you set up your compliance program, TrustCloud TrustOps works to ensure that your systems remain compliant with your adopted controls. To do so, TrustCloud runs automated tests against systems in your product and business stack, retrieves inventories, and verifies that they are properly configured.

This document outlines the steps you can take to grant TrustCloud access to only read from your Snyk project***,*** so that TrustOps can validate and generate evidence for your compliance program.

Instructions to grant TrustCloud limited access to Snyk data

1. Log into Snyk with a user who is an owner of your Snyk Group.
2. Navigate to the Group settings page by selecting Settings under the Groups tab.
3. Under the settings tab, select Service accounts. This will navigate you to the page where an API Key can be created.
   
4. Provide an appropriate name to the Service account & select Group Viewer as the Role. For the service account type, select API Key & click Create Service Account. This will create an API Key, take a copy of the key & click Close window.
   
5. Navigate to the Organization settings page, by selecting your organization in the left pane & selecting the Settings tab.
   
6. Copy the Organization Slug for future reference.
7. Provide the token & the organization slug in TrustCloud.