> ## Documentation Index
> Fetch the complete documentation index at: https://docs.semgrep.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# View Semgrep findings in Wiz's Security Graph

Semgrep integrates with Wiz by establishing a secure connection with Wiz's API endpoints. If your Wiz instance has a security graph enrichment integration, you can view SAST vulnerabilities that Semgrep identifies in the repositories it scans and are also present in your cloud-native application protection platform (CNAPP). Semgrep's goal is to give you a holistic view of your code and infrastructure security so that you can focus on what matters most.

<Frame caption="A list of Semgrep findings in Wiz.">
  <img src="https://mintcdn.com/semgrep-ee9d73d8/dAOv4YoaZfaIbJZH/images/semgrep-findings-in-wiz-87aefbc8c28ba9c86d5ba3f0361a6556.png?fit=max&auto=format&n=dAOv4YoaZfaIbJZH&q=85&s=8cbaff049e8ad6a2c1cd2f3ede52fa11" alt="A list of Semgrep findings in Wiz" width="2944" height="854" data-path="images/semgrep-findings-in-wiz-87aefbc8c28ba9c86d5ba3f0361a6556.png" />
</Frame>

<Frame caption="Detailed information for a finding sent by Semgrep to Wiz.">
  <img src="https://mintcdn.com/semgrep-ee9d73d8/dAOv4YoaZfaIbJZH/images/wiz-finding-details-2-ab0b87b440f3033e44e9c9cd2a5eb5d7.png?fit=max&auto=format&n=dAOv4YoaZfaIbJZH&q=85&s=bc013447ae14fa8f831e6878e6f2f977" alt="Detailed information for a finding sent by Semgrep to Wiz" width="1958" height="1830" data-path="images/wiz-finding-details-2-ab0b87b440f3033e44e9c9cd2a5eb5d7.png" />
</Frame>

## Prerequisites

This integration is available for users with both a [Semgrep Code license](https://semgrep.dev/products/semgrep-code/) and a [Wiz Code Security license](https://www.wiz.io/platform/wiz-code).

To send Semgrep Code findings to Wiz:

* You must [connect your source code manager to Semgrep](/deployment/connect-scm). At this time, Wiz [supports the use of the following](https://win.wiz.io/sast-app-vuln-findings-schema#schema-fields):
  * GitHub Cloud
  * GitHub Enterprise Server
  * GitLab Cloud
  * GitLab Self-managed
* You must have a Wiz service account with sufficient permissions to create a service account, if needed, and integrations. The service account must be able to provide Semgrep with the following scopes: `create:external_data_ingestion`, `read:system_activities`, and `read:resources`. You must also have [the client ID and the client secret that accompanies the service account](https://docs.wiz.io/wiz-docs/semgrep-integration).
* You must add the [Semgrep integration](https://app.wiz.io/settings/automation/integrations) from the Wiz Integration Network. During this process, save the following values shown to you:

    i. API Endpoint URL<br />
    ii. Authentication URL
  You can find both values at a later date under [tenant info](https://app.wiz.io/tenant-info/general).

<Note>
  **NOTE**

  For Wiz users with a [Code Security](https://www.wiz.io/platform/wiz-code) license: this integration takes effect automatically when you create a Wiz Cloud Insights account.
</Note>

## Limitations

Semgrep sends data to Wiz after every successful full scan; Semgrep does not send data from diff-aware scans. Wiz batches and syncs your data once every 24 hours.

By default, the Code findings that Semgrep sends are:

* Critical or high severity
* From full scans
* From the default branch of each repository

Semgrep sends findings from all repositories on supported SCMs in your organization. Findings previously sent but not included in submissions are marked as fixed in Wiz.

Currently, findings from repositories on SCMs other than GitHub and GitLab are not supported, as indicated in [Prerequisites](#prerequisites).

<Warning>
  **CAUTION**

  Due to [a limitation of how Wiz handles external enrichment data](https://win.wiz.io/limitations#external-enrichment-limitations), you must run a new SAST scan on your Semgrep project once a week to maintain the data displayed in Wiz.
</Warning>

## Add the Semgrep integration from the Wiz Integration Network

To learn how to add the Semgrep integration from the Wiz Integration Network, review [Wiz Docs' Semgrep Integration](https://docs.wiz.io/wiz-docs/semgrep-integration).

## Configure the integration in Semgrep

Once you've added the Semgrep integration from the Wiz Integration Network, you must continue the setup process in Semgrep:

<Steps>
  <Step>
    Sign in to [Semgrep](https://semgrep.dev/login).
  </Step>

  <Step>
    In the navigation bar, click **Settings**.
  </Step>

  <Step>
    Navigate to **Integrations**, and click **+ Add > Wiz**.
  </Step>

  <Step>
    In the dialog that appears, provide the following information:

    i. API Endpoint URL

    ii. Authentication URL

    iii. Client ID

    iv. Client Secret

    You can obtain the **API Endpoint URL** and the **Authentication URL** from Wiz in [Tenant Info](https://app.wiz.io/tenant-info/general), while Wiz provides the **Client ID** and **Client Secret** when you set up a service account.
  </Step>

  <Step>
    Click **Connect**.
  </Step>

  <Step>
    If Semgrep successfully creates the connection, a dialog pops up that says, "Wiz credential created successfully." Semgrep also lists Wiz as an integration; you can verify the connection again by clicking **Test connection**.
  </Step>
</Steps>

### Edit the integration

To edit the integration:

<Steps>
  <Step>
    Sign in to [Semgrep](https://semgrep.dev/login).
  </Step>

  <Step>
    In the navigation bar, click **Settings**.
  </Step>

  <Step>
    Navigate to **Integrations**, and find the **Wiz** integration.
  </Step>

  <Step>
    Click **Edit**, and update the information required by Wiz as needed.
  </Step>

  <Step>
    Click **Save changes**.
  </Step>
</Steps>

### Delete the integration

To delete the integration:

<Steps>
  <Step>
    Sign in to [Semgrep](https://semgrep.dev/login).
  </Step>

  <Step>
    In the navigation bar, click **Settings**.
  </Step>

  <Step>
    Navigate to **Integrations**, and find the **Wiz** integration.
  </Step>

  <Step>
    Click the **<Icon icon="trash" iconType="solid" /> trash can** icon.
  </Step>

  <Step>
    Click **Delete** to confirm.
  </Step>
</Steps>