If you initiate Semgrep scans using GitHub Actions or GitLab CI/CD pipeline, Semgrep may automatically create new SCM connections and add the accompanying projects to Semgrep AppSec Platform. This can happen if the CI job has sufficient permissions through the access token you provide to create the connection between Semgrep and GitHub or GitLab. The projects associated with the newly created SCM connections are listed in Semgrep AppSec Platform on the Projects > Not scanning page. They are not automatically scanned by Semgrep.Documentation Index
Fetch the complete documentation index at: https://docs.semgrep.dev/llms.txt
Use this file to discover all available pages before exploring further.
Semgrep in CI
Why are there new source code manager (SCM) connections that I didn't manually configure listed in Semgrep AppSec Platform?
Receive Semgrep MR comments through a GitLab runnerDoes Semgrep scan compressed files or other non-code files?