Semgrep
Let AI connect your sources for you
Skip the manual setup — run this in your project and the wizard auto-detects your databases and APIs and connects them to PostHog.
Connect Semgrep to PostHog to sync your data into the PostHog data warehouse for analysis and modeling.
Enter your Semgrep API token to sync your static analysis data — deployments, projects, code (SAST) and supply chain (SCA) findings, and secrets — into the PostHog Data warehouse.
Create a token in Semgrep AppSec Platform under Settings → Tokens and grant it the Web API scope. The API requires a Semgrep Team or Enterprise plan.
Configuration
| Option | Type | Required |
|---|---|---|
API token | password | Yes |
Linking Semgrep to PostHog
- Go to the Data pipeline page in PostHog
- Click New source and select Semgrep
- Fill in the required configuration fields
- Click Next, select the tables you want to sync, and then press Import
Supported tables
| Table | Description | Sync method | Incremental field | Primary key |
|---|---|---|---|---|
deployments | The Semgrep deployment (organization) the API token can access, with its identifiers and links to related resources. | Full refresh | — | id |
projects | Projects (repositories) that have been scanned by or onboarded to Semgrep in the deployment. Archived repositories are not returned. | Full refresh | — | deployment_id, id |
sast_findings | Code (SAST) findings Semgrep has identified in the deployment, deduplicated across refs/branches to match the counts in the Semgrep UI. | Full refresh | — | deployment_id, id |
sca_findings | Supply chain (SCA) findings Semgrep has identified in the deployment's dependencies, deduplicated across refs/branches to match the counts in the Semgrep UI. | Full refresh | — | deployment_id, id |
secrets | Secrets findings Semgrep has detected in the deployment's repositories, with validation state for supported services. Note: this endpoint returns camelCase field names. | Full refresh | — | deployment_id, id |