SaaS

Secure Code Warrior

Secure Code Warrior is in Beta in Ploy. It has been built from Secure Code Warrior's API documentation and has not yet been run against a live company, so the first step of setup asks you to agree to share redacted error information with Ploy. That means if a call to Secure Code Warrior fails, Ploy records the error details with names, emails and other personal data removed, so we can fix the integration quickly.

What Ploy reads and does

  • Every user in your Secure Code Warrior company, including people who have been invited but have not signed in yet.

  • Each user's role (Developer, Team manager or Company admin), their licence type (Full, Limited or Citizen AI), their team and their last login.

  • Every team in your company.

  • Disabled users lose their access in Ploy as soon as Ploy sees them disabled.

From Ploy you can create users (with a role and a team), disable and re-enable them, delete them, change their role, and move them to a different team from the team's page. Everyone in Secure Code Warrior belongs to exactly one team, so moving someone takes them out of their current team.

Ploy syncs every 6 hours.

Before you start

You need:

  • A Company Admin account in Secure Code Warrior.

  • To know which region your company is on: US or EU. If you sign in at portal.eu.securecodewarrior.com, you are on EU. If you are not sure, ask your Secure Code Warrior Customer Success Manager.

1. Create an Admin API key

  1. Sign in to Secure Code Warrior as a Company Admin.

  2. Go to Administration, then Platform configuration, then Edit Company.

  3. Find the Admin API section and generate a new key. Copy it.

It must be an Admin API key. A Reporting API key cannot read users or teams. If you cannot see the Admin API section, ask Secure Code Warrior support to enable it for your company.

2. Connect it in Ploy

  1. In Ploy, go to Integrations and choose Secure Code Warrior.

  2. Tick the box to agree to share redacted error information (this appears while the integration is in Beta).

  3. Choose your region.

  4. Paste your Admin API key.

  5. Select Test connection, then save.

If the connection test fails

  • "Secure Code Warrior rejected that API key": check it is an Admin API key, that you copied all of it, and that you chose the region your company is on. A key only works on its own region.

  • "Licence has expired or the account is disabled": contact your Secure Code Warrior Customer Success Manager.

Creating users from Ploy

When you add a "Create user in integration" step for Secure Code Warrior, set:

  • Team: required. The name of a team, exactly as Secure Code Warrior shows it. Secure Code Warrior needs every user to be in a team.

  • Role: developer, team manager or company admin. Leave it blank for developer.

Secure Code Warrior emails the new user an invitation. If two of your teams share a name, Ploy cannot place people in either of them, because Secure Code Warrior chooses teams by name. Rename one of them first.

Was this helpful?
Was this helpful?