How to exclude a Semgrep Supply Chain rule from a scan

To troubleshoot a problematic rule or to remove a rule that’s too noisy, you can exclude a specific rule from being run during a Semgrep Supply Chain scan using the --exclude-rule flag:

semgrep ci --exclude-rule <rule_ID>

The --exclude-rule flag requires the rule ID as a parameter. To retrieve this value:

Select the finding whose details you want to view:

If the default Group by Rule is enabled, click the Details icon on the card of the finding.
If the No grouping view is enabled, click the header hyperlink on the card of the finding.

Scroll to the Pattern panel, and click Rule to change the view. The rule id is listed in row 1 and begins with the ssc prefix.

Semgrep Supply Chain (SSC)Malware incident response with Semgrep Supply Chain

⌘I

Documentation Index