Supported Data Models
- Issues (AppSec)
- type:
vulnerability,code,config,license,custom
- type:
- Vulnerability Findings V2
- type:
dependency,code,unknown
- type:
- Resources
- type:
repository
- type:
Onboarding Socket.dev
Follow the steps below to onboard your environment to our Socket.dev integration.1
Generate an API Key
- Log in to your Socket.dev dashboard at socket.dev.
- If you have multiple organizations, select the correct one from the organization switcher.
- Go to Settings → API Keys → Create API Token.
- Name it (e.g., “Leen Integration”).
- Under Scopes, check:
repo:list– to list repositoriesalerts:list– to fetch security alerts
- Click Create and copy the key (it won’t be shown again).
2
Find Your Organization Slug
- In the Socket.dev dashboard, navigate to your organisation’s page.
- The organisation slug appears in the URL:
https://socket.dev/dashboard/org/{org-slug}/
3
Enter Configuration Parameters in Leen
In your Leen integration configuration, provide the following:
Severity Mapping
Socket alert severities are mapped to Leen’s unified severity model as follows:State Mapping
Socket alert states are mapped to Leen’s unified state model as follows:Alert Type Mapping
Socket alert categories are mapped to Leen issue and finding types as follows:Data Synced
The Socket.dev integration syncs the following data:- Alerts: Open security alerts across all repositories, including critical CVEs, supply chain risks, deprecated packages, and potential vulnerabilities.
- Repositories: All repositories in the organisation, used as Leen resources of type
repository.