Skip to content

docs: document required API token scopes for Socket Basics #68

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lelia merged 2 commits into from
Jun 26, 2026
Merged

docs: document required API token scopes for Socket Basics #68

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
3bc2da7
docs: document required API token scopes for Socket Basics
dc-larsen Apr 28, 2026
06a5cfc
docs: clarify Socket Basics token scopes
lelia Jun 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -160,6 +160,17 @@ Configure scanning policies, notification channels, and rule sets for your entir

![Socket Basics Section Config](docs/screenshots/socket_basics_section_config.png)

### Required API Token Scopes

Create your `SOCKET_SECURITY_API_KEY` in the Socket Dashboard under **Settings → API Tokens**. Socket Basics needs the following scopes:
Comment thread
lelia marked this conversation as resolved.
Outdated

| Scope | Required for |
|-------|--------------|
| `socket-basics` | Loading scanner configuration from the Socket Dashboard |
| `full-scans` | Submitting scan results to your organization |

If your token is missing the `socket-basics` scope, you will see `Insufficient permissions` when Socket Basics tries to load dashboard config. As a workaround, set `SOCKET_ORG` explicitly in your workflow to skip the dashboard config load and run with CLI/environment configuration only.
Comment thread
lelia marked this conversation as resolved.
Outdated

## 💻 Other Usage Methods

For GitHub Actions, see the [Quick Start](#-quick-start---github-actions) above or the **[Complete GitHub Actions Guide](docs/github-action.md)** for advanced workflows.
Expand Down Expand Up @@ -251,6 +262,7 @@ Add new connectors by:
**Socket API errors:**
- Ensure `SOCKET_SECURITY_API_KEY` and `SOCKET_ORG` are set correctly
- Verify your Socket Enterprise subscription is active
- If you see `Insufficient permissions`, confirm your API token has the `socket-basics` and `full-scans` scopes (see [Required API Token Scopes](#required-api-token-scopes))

**Notifier errors:**
- Check that notification credentials (Slack webhook, Jira token, etc.) are properly configured
Expand Down