Socket.dev - Tierity Docs

Overview

Socket.dev detects malicious and risky open source packages before they enter your codebase. The Tierity integration pulls supply chain alerts from Socket so your team can review and act on package-level risks in context.

Prerequisites

A Socket.dev account
A Socket API key
Manage access (or higher) in Tierity

Setup

1

Get your Socket API key

Log in to socket.dev.
Go to Settings → API Keys.
Create a new key and copy it.

2

Configure in Tierity

Go to Config → Integrations → Socket.dev.
Enter your API Key and select the organizations to monitor.
Click Save & Test.

What’s available

View	Description
Alerts	Active supply chain alerts by severity (critical, high, medium, low)
Package detail	Alert type, affected package version, and recommendation
Repository scope	Filter alerts by connected repository

Workbench card

The Socket.dev workbench card shows alert counts by severity across all monitored repositories.