Published on July 21st, 2021


In order to use the Backstage Snyk plugin with Roadie, you must securely provide Roadie with an API token which it can use to access the Snyk API.

Connect Roadie to Snyk

To get an API token, you need to sign up for a Snyk account. Within this account, you will need to obtain three things:

  • API token
  • Organization Name
  • Project ID

API Token

This can be found by clicking your name in the top right-hand corner and going to General Settings.

API token for Snyk.

Organization Name

This can be found under the settings page that is visible when you login to Snyk.

Organization Name Snyk.

Project Id

This can be found under the Projects tab. It will be used to link snyk projects to backstage.

Project ID Name Snyk.

Step 1: Add the token to Roadie


Click the pencil icon beside SNYK_TOKEN. Enter it into the input in the dialog that pops up (See above for retrieving token).

a dialog box with an input called Secret Value. The Snyk token is pasted inside.

Click Save.

Wait a few moments for the secret to be applied.

Step 2: Add the Snyk annotation to a component

Using the Snyk UI, find a Snyk project which you would like to associate with a component in Roadie (see above for retrieving ID.

Copy the name from the Project settings

Edit the catalog-info.yaml for the component you wish to associate with this Snyk project and add the and annotation.

kind: Component
  name: sample-service
  description: Sample service
  annotations: <Your organization> <Your Project ID>

Commit and push this change and Roadie should pick it up within a few minutes.


  1. Snyk integration docs