Integrate Aikido

What Does This Integration Do in Scrut?

• Vulnerability Management: This integration imports vulnerability data from Aikido into Scrut's Third-Party Scans page, enabling you to track, assign, and remediate vulnerabilities directly in Scrut.

Prerequisites

Before setting up the integration, ensure you have:

• An active Aikido account with permissions to create an API client
• Admin access to Scrut (or Contributor with access to the Integration module)

Permissions and Access Requirements

Scrut requires the following permissions in your Aikido instance:

• users: read
• repositories: read
• issues: read

Sync Frequency

Data syncs automatically every 24 hours. You can also manually trigger a sync from the integration settings page when needed.

Integration Setup

Step 1: Generate API Client Credentials in Aikido

1. Log in to your Aikido account.

2. Navigate to Settings → Integrations or click Integrations on the left nav bar.

3. Under Public API, find the Public REST API card and click it.

   

4. On the Aikido public REST API integration page, click Add Client.

   

5. In the Create API client credentials dialog, enter an app name. For example, Scrut Integration.

6. Under Select the scopes for the credentials, select the following read-only scopes for the application:

   • users: read
   • repositories: read
   • issues: read

7. Under App Type, select Public; this app should be installable by 3rd-party organizations using Aikido.

8. In the Redirect URI field, enter the appropriate URL based on your Scrut instance region.

   • India: https://app.scrut.io/settings/integration/aikido
   • For US: https://app.us.scrut.io/settings/integration/aikido
   • For EU: https://app.eu.scrut.io/settings/integration/aikido
   • For Australia: https://app.au.scrut.io/settings/integration/aikido

9. Click Create Credentials.

   

10. Copy the Client ID and Client Secret shown in the dialog and store them somewhere secure.

    Important: Aikido displays the client secret only once. You cannot retrieve it after you close this dialog, so copy it before clicking OK.

    

Step 2: Add the Credentials in Scrut

1. Log in to your Scrut account.
2. Navigate to Integrations → Integrations Library.
3. Under the Vulnerability Scanners category, find the Aikido card and click Integrate.

   

4. On the Aikido integration page, under Credentials, paste the Client ID and Client Secret you copied from Aikido.
5. Click Submit.

   

Step 3: Authorize Scrut in Aikido

1. Scrut redirects you to the Grant permissions to Scrut Integration page in Aikido.
2. Confirm that the correct workspace is selected in the workspace dropdown.
3. Review the permissions Scrut requests, then click Authorize to complete the connection.
4. Watch for the connection success notification.

   

What Happens Next?

Initial sync

After integration, Scrut immediately starts syncing data from your Aikido instance. However, the initial sync may take several minutes, depending on the volume of data in your Aikido instance.

View synced vulnerabilities in Scrut

Once the initial sync is over,

• In Scrut, navigate to Vulnerabilities → Third-Party Scans.
• Filter the data by Source: Aikido.
• Confirm whether vulnerabilities are listed with names, severities, CVEs (where applicable), and affected assets.

  

Troubleshooting

If you have any issues connecting Aikido with Scrut, contact our support team at support@scrut.io.