Semgrep

Connect Semgrep to access static analysis findings and code security rules through Cendriix agents.

Overview

How to connect

1. Navigate to Settings → Integrations → Connectors
2. Click Connect on the Semgrep integration
3. Enter your Semgrep API token
4. Once configured, security data becomes available

Getting your API token

1. Go to Semgrep Cloud → Settings → Tokens 
2. Copy the token and paste it in the Cendriix setup wizard

Capabilities

Once connected, Cendriix agents can:

• Read scan findings and rule matches
• Access project configurations
• Reference code security context for reviews

Security notes

• Use scoped tokens with read-only permissions
• Tokens are stored encrypted in AWS Secrets Manager
• Disconnect at any time from Settings → Integrations → Connectors

Further reading

• Semgrep API Documentation