Why are my projects showing a status of 'Not yet started' after I enable Managed Scans?
When onboarding a large number of projects to Semgrep Managed Scans (SMS), users may notice that many of them show a ‘Not yet started’ status, even after enabling Managed Scans. This is because Semgrep doesn’t trigger scans for all projects at once. Instead, Semgrep scans the repositories over time to manage system resources effectively.
Use this file to discover all available pages before exploring further.
If you need immediate results for specific projects, you can manually trigger a scan:
1
In Semgrep AppSec Platform, navigate to Projects.
2
Find the project you want to scan, then click the project’s window icon under the Details column.
3
On the project’s Details page, click Run a new scan > Rule-based detection.
After the initial scan, Semgrep automatically scans each repository every week.
WARNINGIf projects remain in Not yet started status for longer than a week, or if manually triggered scans don’t start, this could indicate an issue with the: