|
| 1 | +--- |
| 2 | +title: "Aikido Security" |
| 3 | +description: "Connect Aikido to automate security evidence in Comp AI" |
| 4 | +--- |
| 5 | + |
| 6 | +## Overview |
| 7 | + |
| 8 | +The Aikido Security integration syncs vulnerability and repository scanning data into Comp AI, so compliance tasks can be automatically satisfied with continuous evidence. |
| 9 | + |
| 10 | +## Setup |
| 11 | + |
| 12 | +### 1. Create API credentials in Aikido |
| 13 | + |
| 14 | +1. Go to **Aikido Settings → Integrations → API** |
| 15 | + Or open: https://app.aikido.dev/settings/integrations/api/aikido/rest |
| 16 | + |
| 17 | +2. Click **Add Client** |
| 18 | + |
| 19 | +3. Select **Private** as the app type |
| 20 | +4. Select the following permissions: |
| 21 | + - `issues:read` |
| 22 | + - `repositories:read` |
| 23 | + - `basics:read` |
| 24 | +5. Click **Create Credentials** |
| 25 | + |
| 26 | + |
| 27 | +### 2. Connect in Comp AI |
| 28 | + |
| 29 | +1. In Comp AI, go to **Settings → Integrations → Aikido** |
| 30 | +2. Paste the **Client ID** and **Client Secret** |
| 31 | + |
| 32 | +3. Click **Connect** |
| 33 | + |
| 34 | +4. Authorize the app in Aikido when prompted |
| 35 | + |
| 36 | +5. You will return to Comp AI and see the integration connected |
| 37 | + |
| 38 | + |
| 39 | +Comp AI will exchange the credentials for an access token using OAuth 2.0 Client Credentials (server-to-server). |
| 40 | + |
| 41 | +## What Comp AI Collects |
| 42 | + |
| 43 | +### Secure Code evidence |
| 44 | + |
| 45 | +- Open security issues (by severity) |
| 46 | +- Repository scanning activity |
| 47 | +- Stale scans (repos not scanned in over 7 days) |
| 48 | + |
| 49 | +### Monitoring and Alerting evidence |
| 50 | + |
| 51 | +- Issue count thresholds (configurable) |
| 52 | +- Severity breakdown summaries |
| 53 | + |
| 54 | +## Configuration Options |
| 55 | + |
| 56 | +After connecting, you can configure: |
| 57 | + |
| 58 | +- **Minimum severity to fail on** (low, medium, high, critical) |
| 59 | +- **Maximum allowed open issues** (threshold check) |
| 60 | +- **Repositories to monitor** (optional filter) |
| 61 | +- **Include snoozed issues** (optional) |
| 62 | + |
| 63 | +## Verify It Works |
| 64 | + |
| 65 | +1. Open the Aikido integration in Comp AI |
| 66 | +2. Click **Run** on any check |
| 67 | +3. You should see a recent run with passing or failing evidence |
| 68 | + |
| 69 | + |
| 70 | +If a check fails with `HTTP 401: Unauthorized`, verify the Client ID and Client Secret and ensure the permissions listed above are enabled in Aikido. |
| 71 | + |
| 72 | +## Screenshots |
| 73 | + |
| 74 | +Screenshots for each step are included above. |
| 75 | + |
| 76 | +## References |
| 77 | + |
| 78 | +- Aikido API docs: https://apidocs.aikido.dev/reference |
0 commit comments