> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tierity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Socket.dev

> Monitor supply chain security alerts from Socket.dev in Tierity.

## Overview

Socket.dev detects malicious and risky open source packages before they enter your codebase. The Tierity integration pulls supply chain alerts from Socket so your team can review and act on package-level risks in context.

## Prerequisites

* A Socket.dev account
* A Socket API key
* Manage access (or higher) in Tierity

## Setup

**1. Get your Socket API key**

1. Log in to [socket.dev](https://socket.dev).
2. Go to **Settings → API Keys**.
3. Create a new key and copy it.

**2. Configure in Tierity**

1. Go to **Config → Integrations → Socket.dev**.
2. Enter your **API Key** and select the **organizations** to monitor.
3. Click **Save & Test**.

## What's available

| View | Description |
| - | - |
| **Alerts** | Active supply chain alerts by severity (critical, high, medium, low) |
| **Package detail** | Alert type, affected package version, and recommendation |
| **Repository scope** | Filter alerts by connected repository |

## Workbench card

The **Socket.dev** workbench card shows alert counts by severity across all monitored repositories.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.