README

Introduction

Welcome to Semgrep's portal for the Semgrep AppSec Platform web API.

Introduction

Semgrep is a fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time. Get started.

This API is documented in the OpenAPI format.

Authentication

The API supports authentication with an API token with the "Web API" permission, without limited scopes of access.

You can provision an API token from the Settings page.

Terms of Use

Please note, the materials made available herein are subject to the Semgrep Terms of Use, and your access or use of any of the same is your acknowledgment and acceptance of the such terms.

Install the Package

Run the following command to install the package and automatically add the dependency to your composer.json file:

composer require "sdksio/apimatic-semgrep-sdk:0.0.1"

Or add it to the composer.json file manually as given below:

"require": {
    "sdksio/apimatic-semgrep-sdk": "0.0.1"
}

You can also view the package at: https://packagist.org/packages/sdksio/apimatic-semgrep-sdk#0.0.1

Initialize the API Client

Note: Documentation for the client can be found here.

The following parameters are configurable for the API Client:

The API client can be initialized as follows:

use SemgrepWebAppLib\Logging\LoggingConfigurationBuilder;
use SemgrepWebAppLib\Logging\RequestLoggingConfigurationBuilder;
use SemgrepWebAppLib\Logging\ResponseLoggingConfigurationBuilder;
use Psr\Log\LogLevel;
use SemgrepWebAppLib\Environment;
use SemgrepWebAppLib\Authentication\SemgrepAdminJwtCredentialsBuilder;
use SemgrepWebAppLib\Authentication\SemgrepJwtCredentialsBuilder;
use SemgrepWebAppLib\Authentication\SemgrepWebTokenCredentialsBuilder;
use SemgrepWebAppLib\SemgrepWebAppClientBuilder;

$client = SemgrepWebAppClientBuilder::init()
    ->semgrepAdminJwtCredentials(
        SemgrepAdminJwtCredentialsBuilder::init(
            'AccessToken'
        )
    )
    ->semgrepJwtCredentials(
        SemgrepJwtCredentialsBuilder::init(
            'AccessToken'
        )
    )
    ->semgrepWebTokenCredentials(
        SemgrepWebTokenCredentialsBuilder::init(
            'AccessToken'
        )
    )
    ->environment(Environment::PRODUCTION)
    ->loggingConfiguration(
        LoggingConfigurationBuilder::init()
            ->level(LogLevel::INFO)
            ->requestConfiguration(RequestLoggingConfigurationBuilder::init()->body(true))
            ->responseConfiguration(ResponseLoggingConfigurationBuilder::init()->headers(true))
    )
    ->build();

Environments

The SDK can be configured to use a different environment for making API calls. Available environments are:

Fields

Authorization

This API uses the following authentication schemes.

• SemgrepAdminJWT (OAuth 2 Bearer token)
• SemgrepJWT (OAuth 2 Bearer token)
• SemgrepWebToken (OAuth 2 Bearer token)

List of APIs

• Deployments Service
• Findings Service
• Misc Service
• Policies Service
• Projects Service
• Scans Service
• Secrets Service
• Supply Chain Service
• Ticketing Service
• Triage Service

SDK Infrastructure

Configuration

• ProxyConfigurationBuilder
• LoggingConfigurationBuilder
• RequestLoggingConfigurationBuilder
• ResponseLoggingConfigurationBuilder

HTTP

• HttpRequest

Utilities

• ApiResponse