Snyk Integration

Connect Snyk to surface vulnerability data, security posture trends, and risk correlation with deployments in Koalr.

Connecting Snyk lets Koalr pull vulnerability data into the Security Posture dashboard — critical/high/medium/low issue counts, affected projects, severity trends, and correlation with deployment risk scores.

What Koalr syncs

Open vulnerability counts — critical, high, medium, and low severity issues per project
Fixable vs. unfixable — how many issues have available fixes
Project-level breakdown — vulnerabilities per repository
Severity trend — week-over-week change in critical and high issues
License issues — dependency license policy violations (if enabled in your Snyk org)

Prerequisites

Snyk account on the Team plan or higher (Free plan has limited API access)
Snyk Organization Admin role to generate an API token

Setup

In Koalr, go to Settings → Integrations.
Click Connect next to Snyk.
Paste your Snyk API token.
- Generate one at app.snyk.io/account → API Token.
Enter your Snyk Organization ID (found in Settings → General in the Snyk UI).
Click Save. Koalr syncs the current snapshot of open issues immediately.

Security Posture dashboard

After connecting, Snyk data appears in Security (/security-posture):

Vulnerability summary — total open issues by severity with 30-day trend
Top affected projects — repositories with the most critical/high issues
Fixable issues — count of issues with patches available
Severity breakdown chart — stacked bar chart of critical/high/medium/low over time

Deploy risk correlation

Snyk vulnerability data is also fed into Koalr's deploy risk scoring. If a repository has open critical vulnerabilities, the deploy risk score for PRs in that repository receives a small upward adjustment (up to +5 points).

Troubleshooting

Rate limits: Snyk's API is rate-limited at 120 requests per minute. Koalr batches requests to stay within this limit; initial syncs for large organizations may take a few minutes.

Missing projects: Koalr only syncs projects that are monitored by Snyk. Ensure your repos are imported and monitored in the Snyk UI.