Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.semgrep.dev/llms.txt

Use this file to discover all available pages before exploring further.

What does "Act on your behalf" mean?

Understand GitHub authorization and permissions.

Web API error 404 and token scopes

Ensure you select the correct token scopes to avoid API 404s.

Automate private rules deployment using the Semgrep API

Learn how to automate private rules deployment using the Semgrep API.

Why can't I access my Semgrep organization after logging in with GitHub?

Why can’t I access my Semgrep organization after logging in with GitHub?

Why does the Projects page display a different dependency count from the Dependencies page?

Learn why the count of dependencies differs across various pages in Semgrep AppSec Platform.

error: externally-managed-environment

Learn how to handle externally managed environment errors when installing Semgrep, and how to install Semgrep using pipx or uv.

FedRAMP authorization boundary for code scanning services like Semgrep

Understanding the FedRAMP authorization boundary for code scanning services like Semgrep.

Why do the findings count differ in the API and the Semgrep AppSec Platform UI?

Learn why the count of findings differs in the API and Semgrep AppSec Platform.

Why are findings counts different across Semgrep AppSec Platform pages?

Learn why the count of findings differs across various pages in Semgrep AppSec Platform.

Why did the comments on a PR or MR not appear inline?

When Semgrep comments on PR or MR findings, the comments are usually posted on the line of code where the finding is identified (inline). However, there are two common reasons why comments may not appear inline.

Why is my repository not receiving PR or MR comments?

Use this reference to check why you may not be receiving Semgrep comments on PRs or MRs.

Semgrep Managed Scans doesn't run for pull requests in GitHub merge queues

Learn how to work around Semgrep Managed Scans not running for pull requests in GitHub merge queues.

Why are my projects showing a status of "Not yet started" after I enable Managed Scans?

Why are my projects showing a status of “Not yet started” after I enable Managed Scans?

Remove users from your Semgrep AppSec Platform organization

Learn how to remove users from Semgrep.

How to re-run a Semgrep Managed Scan

How to re-run a Semgrep Managed Scan check for a pull or merge request.

SAML SSO error: There is no AttributeStatement on the Response

Fix a SAML configuration error when an AttributeStatement is missing.

SAML SSO Error: Authentication method doesn't match requested

If needed, check the box to enable non-password authentication mechanisms on Semgrep AppSec Platform.

SAML SSO Error: Signature validation failed

If SAML signature validation fails, check your certificate upload and information.

SAML SSO with Google Workspace

Learn how to set up SAML access to Semgrep AppSec Platform with Google Workspace.

SAML SSO with Microsoft Entra ID

Learn how to set up SAML access to Semgrep AppSec Platform with Microsoft Entra ID.

Troubleshooting SAML SSO

Learn to troubleshoot SAML configuration when SAML stops working.

Why is the scan duration reported by Semgrep different from the scan duration of the end-to-end process of running a diff-aware managed scan?

Learn why the scan duration for a managed scan differs from the scan duration reported by a CI/CD provider.

Search, filter, and sort findings in Semgrep AppSec Platform

Learn how to search for, filter for, and sort findings in Semgrep AppSec Platform.

The semgrep login command doesn't redirect to my Semgrep tenant site

Execute semgrep login correctly for customers on dedicated tenants.

SAML SSO error BadRequest: Missing attribute

Ensure that you’re sending the required name and email attributes to Semgrep AppSec Platform.