Configure Semgrep ingestion

Connect Semgrep to Cortex Cloud, select findings, and manage the integration.

Connect Semgrep to Cortex Cloud to ingest SCA and SAST findings.

Prerequisites

Complete the Semgrep prerequisites before onboarding.

Onboarding steps

1. Select Settings → Data Sources & Integrations → + Add New.
2. Search for Semgrep. Select Add or Add Another Instance.
3. On Configure Integration, provide your Semgrep API key. Select Authorize.
4. On Select Issue Types, select SAST, SCA, or both. Select Next.
5. On Select Projects, review the detected Semgrep projects. Confirm or update repository mappings.

   • Accept detected mappings when they are correct.
   • Select Automatically map future Semgrep projects to map future projects automatically.
   • For unmapped projects, select the project and choose its repository.

   Mapping connects Semgrep projects to Cortex Cloud repositories. Only mapped projects are ingested.
6. Click Save.

Verify integration

Verify the integration in Cortex Cloud:

• On Data Sources & Integrations, filter for Semgrep. Select the data source and confirm your instance and mapped projects show Connected.