# Semgrep

## Docs

- [Authentication](https://docs.semgrep.dev/api-reference/v1/Authentication.md)
- [Semgrep API v1](https://docs.semgrep.dev/api-reference/v1/Introduction.md): Welcome to the portal for Semgrep AppSec Platform's web API.
- [Terms of Use](https://docs.semgrep.dev/api-reference/v1/Terms-of-Use.md)
- [List deployments](https://docs.semgrep.dev/api-reference/v1/deploymentsservice/list-deployments.md): Request the deployments your auth can access.
- [List code, supply chain, or AI-powered scan findings](https://docs.semgrep.dev/api-reference/v1/findingsservice/list-code-supply-chain-or-ai-powered-scan-findings.md): Request the list of code, supply chain, or AI-powered scan findings in an organization, paginated in pages of 100 entries and limited by the `since` timestamp. Findings are returned by `rel…
- [[Beta] Get SMS VPC Bootstrap CloudFormation Template](https://docs.semgrep.dev/api-reference/v1/miscservice/[beta]-get-sms-vpc-bootstrap-cloudformation-template.md): VPC support for Managed Scans is in private beta.
- [Ping](https://docs.semgrep.dev/api-reference/v1/miscservice/ping.md): Use to ping the server and assert liveness.
- [List policies](https://docs.semgrep.dev/api-reference/v1/policiesservice/list-policies.md)
- [List policy rules](https://docs.semgrep.dev/api-reference/v1/policiesservice/list-policy-rules.md)
- [Update policy](https://docs.semgrep.dev/api-reference/v1/policiesservice/update-policy.md)
- [Add tags to project](https://docs.semgrep.dev/api-reference/v1/projectsservice/add-tags-to-project.md): Add tags to a project for a deployment you have access to.
- [Delete project](https://docs.semgrep.dev/api-reference/v1/projectsservice/delete-project.md): Delete a project for a deployment you have access to. This will also delete all of the associated findings.
- [Get project details](https://docs.semgrep.dev/api-reference/v1/projectsservice/get-project-details.md): Retrieve details for a single project associated with a deployment that you have access to.
- [List all projects](https://docs.semgrep.dev/api-reference/v1/projectsservice/list-all-projects.md): Request the list of projects that have been scanned or onboarded to Managed Scans. Does not return archived repositories. Returns 100 projects per page by default.
- [Remove tags from project](https://docs.semgrep.dev/api-reference/v1/projectsservice/remove-tags-from-project.md): Remove tags from a project for a deployment you have access to.
- [Toggle Managed Scans for a project](https://docs.semgrep.dev/api-reference/v1/projectsservice/toggle-managed-scans-for-a-project.md): Enable or disable [Semgrep Managed Scans](/docs/deployment/managed-scanning/overview) for a project.
- [Update project details](https://docs.semgrep.dev/api-reference/v1/projectsservice/update-project-details.md): Update attributes for the project using the value passed in to the request body.
- [Get scan details](https://docs.semgrep.dev/api-reference/v1/scansservice/get-scan-details.md): Request the details of a scan including the associated deployment, repository, and commit information.
- [List scans (beta)](https://docs.semgrep.dev/api-reference/v1/scansservice/list-scans-beta.md): List the scans associated with a particular repository over the past 30 days.
- [List secrets](https://docs.semgrep.dev/api-reference/v1/secretsservice/list-secrets.md)
- [Create a new SBOM export job](https://docs.semgrep.dev/api-reference/v1/supplychainservice/create-a-new-sbom-export-job.md)
- [Get the status of a SBOM export job](https://docs.semgrep.dev/api-reference/v1/supplychainservice/get-the-status-of-a-sbom-export-job.md)
- [List dependencies](https://docs.semgrep.dev/api-reference/v1/supplychainservice/list-dependencies.md)
- [List lockfiles in a given repository with dependencies](https://docs.semgrep.dev/api-reference/v1/supplychainservice/list-lockfiles-in-a-given-repository-with-dependencies.md)
- [List repositories with dependencies](https://docs.semgrep.dev/api-reference/v1/supplychainservice/list-repositories-with-dependencies.md)
- [Create Jira tickets](https://docs.semgrep.dev/api-reference/v1/ticketingservice/create-jira-tickets.md): Create Jira tickets for your findings. You can create tickets by passing in a list of issue_ids or by passing in filter query parameters to dynamically select findings. If passing in filter…
- [Link an existing ticket to findings](https://docs.semgrep.dev/api-reference/v1/ticketingservice/link-an-existing-ticket-to-findings.md): Link an existing external ticket (e.g. Jira) to one or more Semgrep findings by providing the ticket URL and a list of finding IDs. This does not create a ticket in your issue tracker — it…
- [Unlink a Jira ticket](https://docs.semgrep.dev/api-reference/v1/ticketingservice/unlink-a-jira-ticket.md): Unlink a Jira ticket by its ID
- [Unlink a ticket from findings](https://docs.semgrep.dev/api-reference/v1/ticketingservice/unlink-a-ticket-from-findings.md): Remove the ticket association from one or more Semgrep findings by providing a list of finding IDs. This does not delete the ticket in your issue tracker — it only removes the association i…
- [Bulk triage](https://docs.semgrep.dev/api-reference/v1/triageservice/bulk-triage.md): Bulk triage your findings. You can select the findings to triage by passing in a list of finding IDs as issue_ids, or by passing in filter query parameters. You must specify the issue_type…
- [Authentication](https://docs.semgrep.dev/api-reference/v2/Authentication.md)
- [Semgrep API v2](https://docs.semgrep.dev/api-reference/v2/Introduction.md): Welcome to the portal for Semgrep AppSec Platform's web API v2.
- [Terms of Use](https://docs.semgrep.dev/api-reference/v2/Terms-of-Use.md)
- [Create Fix Job](https://docs.semgrep.dev/api-reference/v2/aifixjobsservice/create-fix-job.md): This feature is currently in Public Beta.
- [Create Combined Task](https://docs.semgrep.dev/api-reference/v2/aitasksservice/create-combined-task.md): Create a combined task for a deployment
- [Create Pattern Fix Task](https://docs.semgrep.dev/api-reference/v2/aitasksservice/create-pattern-fix-task.md): Create a pattern fixing task for a given pattern and language. This is used in the structure mode of the editor
- [Get Task Info](https://docs.semgrep.dev/api-reference/v2/aitasksservice/get-task-info.md): Get the task info for a deployment
- [Create Autofix](https://docs.semgrep.dev/api-reference/v2/autofixservice/create-autofix.md): This feature is currently in Public Beta.
- [Create Automation](https://docs.semgrep.dev/api-reference/v2/automationsservice/create-automation.md): Create a new automation.
- [Delete Automation](https://docs.semgrep.dev/api-reference/v2/automationsservice/delete-automation.md): Delete an automation by its ID.
- [List Automations](https://docs.semgrep.dev/api-reference/v2/automationsservice/list-automations.md): List all automations.
- [List Automations](https://docs.semgrep.dev/api-reference/v2/automationsservice/list-automations-1.md): List all automations with pagination support.
- [Update Automation](https://docs.semgrep.dev/api-reference/v2/automationsservice/update-automation.md): Update an existing automation.
- [Post autotriage feedback](https://docs.semgrep.dev/api-reference/v2/autotriagefeedbackservice/post-autotriage-feedback.md): Post autotriage feedback
- [Get apionboardingdeployments checklist](https://docs.semgrep.dev/api-reference/v2/checklistservice/get-apionboardingdeployments-checklist.md)
- [Patch apionboardingdeployments checklist](https://docs.semgrep.dev/api-reference/v2/checklistservice/patch-apionboardingdeployments-checklist.md)
- [Post apionboardingdeployments invite members](https://docs.semgrep.dev/api-reference/v2/checklistservice/post-apionboardingdeployments-invite_members.md)
- [Get deployment admin product config](https://docs.semgrep.dev/api-reference/v2/deploymentproductsservice/get-deployment-admin-product-config.md): Get the admin product configuration for a deployment
- [Get deployment product config](https://docs.semgrep.dev/api-reference/v2/deploymentproductsservice/get-deployment-product-config.md): Get the product configuration for a deployment
- [Upsert deployment product config](https://docs.semgrep.dev/api-reference/v2/deploymentproductsservice/upsert-deployment-product-config.md): Create or update the product configuration for a deployment
- [Add Deployment User](https://docs.semgrep.dev/api-reference/v2/deploymentservice/add-deployment-user.md): Add a user to the deployment
- [Create Deployment](https://docs.semgrep.dev/api-reference/v2/deploymentservice/create-deployment.md): Create adeployment
- [Get Deployment](https://docs.semgrep.dev/api-reference/v2/deploymentservice/get-deployment.md): Get a deployment
- [Get Deployment Authorized Actions](https://docs.semgrep.dev/api-reference/v2/deploymentservice/get-deployment-authorized-actions.md): Get list of actions the user is authorized to take on the deployment
- [Get deployment default user role](https://docs.semgrep.dev/api-reference/v2/deploymentservice/get-deployment-default-user-role.md): Get the default user role for a deployment
- [Get Deployment GitHub App Status](https://docs.semgrep.dev/api-reference/v2/deploymentservice/get-deployment-github-app-status.md): Check if the Semgrep GitHub app is installed for the deployment
- [Get Deployment Users](https://docs.semgrep.dev/api-reference/v2/deploymentservice/get-deployment-users.md): Get deployment users
- [Get Deployments](https://docs.semgrep.dev/api-reference/v2/deploymentservice/get-deployments.md): Get all deployments for a token
- [List Deployment Users](https://docs.semgrep.dev/api-reference/v2/deploymentservice/list-deployment-users.md): List deployment users (paginated)
- [Patch apiagentdeployments users roles](https://docs.semgrep.dev/api-reference/v2/deploymentservice/patch-apiagentdeployments-users-roles.md)
- [Post apiagentdeployments has deepsemgrep](https://docs.semgrep.dev/api-reference/v2/deploymentservice/post-apiagentdeployments-has_deepsemgrep.md)
- [Post apiagentdeployments has dependency query](https://docs.semgrep.dev/api-reference/v2/deploymentservice/post-apiagentdeployments-has_dependency_query.md)
- [Post apiagentdeployments has triage via comment](https://docs.semgrep.dev/api-reference/v2/deploymentservice/post-apiagentdeployments-has_triage_via_comment.md)
- [Post apiagentdeployments productsfeedback](https://docs.semgrep.dev/api-reference/v2/deploymentservice/post-apiagentdeployments-productsfeedback.md)
- [Remove Deployment User](https://docs.semgrep.dev/api-reference/v2/deploymentservice/remove-deployment-user.md): Remove a user from the deployment
- [Update Deployment](https://docs.semgrep.dev/api-reference/v2/deploymentservice/update-deployment.md): Update a deployment
- [List Deployments](https://docs.semgrep.dev/api-reference/v2/deploymentsservice/list-deployments.md): Request the deployments your auth can access.
- [List Deployment SSO Providers](https://docs.semgrep.dev/api-reference/v2/deploymentssoprovidersservice/list-deployment-sso-providers.md): List all SSO providers for a deployment
- [Create or update a deployment tag](https://docs.semgrep.dev/api-reference/v2/deploymenttagservice/create-or-update-a-deployment-tag.md): Create or update a deployment tag
- [Delete a deployment tag](https://docs.semgrep.dev/api-reference/v2/deploymenttagservice/delete-a-deployment-tag.md): Delete a deployment tag
- [Find deployment tags with project counts](https://docs.semgrep.dev/api-reference/v2/deploymenttagservice/find-deployment-tags-with-project-counts.md): Find deployment tags with project counts
- [Get a deployment tag](https://docs.semgrep.dev/api-reference/v2/deploymenttagservice/get-a-deployment-tag.md): Get a deployment tag
- [List deployment tags](https://docs.semgrep.dev/api-reference/v2/deploymenttagservice/list-deployment-tags.md): List deployment tags
- [Run Pattern](https://docs.semgrep.dev/api-reference/v2/editorservice/run-pattern.md): Execute a Semgrep pattern against target code and return the results
- [Create External Tickets](https://docs.semgrep.dev/api-reference/v2/externalticketingservice/create-external-tickets.md): Create tickets in your issue tracking system for Semgrep findings.
- [Delete External Ticket](https://docs.semgrep.dev/api-reference/v2/externalticketingservice/delete-external-ticket.md): Delete a ticket and unlink it from Semgrep findings.
- [Get External Ticketing Instances](https://docs.semgrep.dev/api-reference/v2/externalticketingservice/get-external-ticketing-instances.md): Gets the issue tracking systems linked to a deployment. E.g. Jira.
- [Link an Existing Ticket to Findings](https://docs.semgrep.dev/api-reference/v2/externalticketingservice/link-an-existing-ticket-to-findings.md): Link an existing external ticket (e.g. Jira) to one or more Semgrep findings by providing the ticket URL and a list of finding IDs. This does not create a ticket in your issue tracker — it…
- [Unlink a Ticket from Findings](https://docs.semgrep.dev/api-reference/v2/externalticketingservice/unlink-a-ticket-from-findings.md): Remove the ticket association from one or more Semgrep findings by providing a list of finding IDs. This does not delete the ticket in your issue tracker — it only removes the association i…
- [List Available Feature Rollouts](https://docs.semgrep.dev/api-reference/v2/featurerolloutsservice/list-available-feature-rollouts.md): List all available feature rollouts
- [Delete apiagentdeployments ignores](https://docs.semgrep.dev/api-reference/v2/ignoresservice/delete-apiagentdeployments-ignores.md)
- [Get apiagentdeployments ignores](https://docs.semgrep.dev/api-reference/v2/ignoresservice/get-apiagentdeployments-ignores.md)
- [Patch apiagentdeployments ignores](https://docs.semgrep.dev/api-reference/v2/ignoresservice/patch-apiagentdeployments-ignores.md)
- [Post apiagentdeployments ignores](https://docs.semgrep.dev/api-reference/v2/ignoresservice/post-apiagentdeployments-ignores.md)
- [Get SMS VPC Bootstrap CloudFormation Template](https://docs.semgrep.dev/api-reference/v2/infrastructureconfigurationsservice/get-sms-vpc-bootstrap-cloudformation-template.md): VPC support for Managed Scans is in private beta.
- [Bulk Update Issues](https://docs.semgrep.dev/api-reference/v2/issuesservice/bulk-update-issues.md): Bulk triage issues that match specified filters
- [Export Issues](https://docs.semgrep.dev/api-reference/v2/issuesservice/export-issues.md): Asynchronously export issues matching filters to a file
- [Get Issue](https://docs.semgrep.dev/api-reference/v2/issuesservice/get-issue.md): Get a single issue by ID with details
- [Get Issue Code Snippets](https://docs.semgrep.dev/api-reference/v2/issuesservice/get-issue-code-snippets.md): Get code snippets for an issue.
- [Get Issue Counts](https://docs.semgrep.dev/api-reference/v2/issuesservice/get-issue-counts.md): Get counts of issues by status with filtering
- [Get Issue Filters](https://docs.semgrep.dev/api-reference/v2/issuesservice/get-issue-filters.md): Get available filter options for issues
- [List Issue Groups](https://docs.semgrep.dev/api-reference/v2/issuesservice/list-issue-groups.md): Search and group issues by rule with filtering and pagination
- [List Issues](https://docs.semgrep.dev/api-reference/v2/issuesservice/list-issues.md): List an organization's recent issues with filtering, sorting, and pagination
- [Delete apiagentdeployments managed scan settings](https://docs.semgrep.dev/api-reference/v2/managedscansettingsservice/delete-apiagentdeployments-managed_scan_settings.md)
- [Get apiagentdeployments managed scan settings](https://docs.semgrep.dev/api-reference/v2/managedscansettingsservice/get-apiagentdeployments-managed_scan_settings.md)
- [Post apiagentdeployments managed scan settings](https://docs.semgrep.dev/api-reference/v2/managedscansettingsservice/post-apiagentdeployments-managed_scan_settings.md)
- [Put apiagentdeployments managed scan settings](https://docs.semgrep.dev/api-reference/v2/managedscansettingsservice/put-apiagentdeployments-managed_scan_settings.md)
- [Create Memory](https://docs.semgrep.dev/api-reference/v2/memoriesservice/create-memory.md): Create a new memory.
- [Create Memory from Triage](https://docs.semgrep.dev/api-reference/v2/memoriesservice/create-memory-from-triage.md): Create a new memory from a triage event.
- [Delete Memory](https://docs.semgrep.dev/api-reference/v2/memoriesservice/delete-memory.md): Delete a memory by its ID.
- [Find Relevant Issues](https://docs.semgrep.dev/api-reference/v2/memoriesservice/find-relevant-issues.md): Find relevant issues for a given rule and repository.
- [Get memories by ids](https://docs.semgrep.dev/api-reference/v2/memoriesservice/get-memories-by-ids.md): Get memories by ids.
- [Get memories stats](https://docs.semgrep.dev/api-reference/v2/memoriesservice/get-memories-stats.md): Get statistics about a deployment's memories performance
- [List Memories](https://docs.semgrep.dev/api-reference/v2/memoriesservice/list-memories.md): List memories, optionally scoped to a single repository.
- [List Suggested Memories](https://docs.semgrep.dev/api-reference/v2/memoriesservice/list-suggested-memories.md): List all suggested memories.
- [Update Memory](https://docs.semgrep.dev/api-reference/v2/memoriesservice/update-memory.md): Update a memory by replacement.
- [Check container health](https://docs.semgrep.dev/api-reference/v2/miscservice/check-container-health.md): Check if container is healthy
- [Check container readiness](https://docs.semgrep.dev/api-reference/v2/miscservice/check-container-readiness.md): Check if container started up correctly
- [Get Identity](https://docs.semgrep.dev/api-reference/v2/miscservice/get-identity.md): Returns the agent's bearer identity
- [Get IP](https://docs.semgrep.dev/api-reference/v2/miscservice/get-ip.md): Returns the current IP address
- [Get Tenant](https://docs.semgrep.dev/api-reference/v2/miscservice/get-tenant.md): Returns the current tenant name for the server (e.g. default)
- [Ping](https://docs.semgrep.dev/api-reference/v2/miscservice/ping.md): Responds with pong
- [Create Notification Rule](https://docs.semgrep.dev/api-reference/v2/notificationrulesservice/create-notification-rule.md): Create a notification rule
- [Delete Notification Rule](https://docs.semgrep.dev/api-reference/v2/notificationrulesservice/delete-notification-rule.md): Delete a notification rule
- [List Notification Rules](https://docs.semgrep.dev/api-reference/v2/notificationrulesservice/list-notification-rules.md): List notification rules
- [Replace Notification Rule](https://docs.semgrep.dev/api-reference/v2/notificationrulesservice/replace-notification-rule.md): Replace a notification rule
- [Test Notification Rule](https://docs.semgrep.dev/api-reference/v2/notificationrulesservice/test-notification-rule.md): Test a notification rule
- [List Unread Notifications](https://docs.semgrep.dev/api-reference/v2/notificationsservice/list-unread-notifications.md): Returns a paginated list of unread notifications for a particular viewer
- [Mark Notifications as Seen](https://docs.semgrep.dev/api-reference/v2/notificationsservice/mark-notifications-as-seen.md): Marks a list of notifications as seen
- [Create Notification Webhook](https://docs.semgrep.dev/api-reference/v2/notificationwebhooksservice/create-notification-webhook.md): Create a new webhook endpoint.
- [Delete Notification Webhook](https://docs.semgrep.dev/api-reference/v2/notificationwebhooksservice/delete-notification-webhook.md): Delete a notification webhook by its ID.
- [Get Notification Webhook](https://docs.semgrep.dev/api-reference/v2/notificationwebhooksservice/get-notification-webhook.md): Get a specific notification webhook by ID.
- [List Notification Webhooks](https://docs.semgrep.dev/api-reference/v2/notificationwebhooksservice/list-notification-webhooks.md): List all notification webhooks for a deployment.
- [Test Notification Webhook](https://docs.semgrep.dev/api-reference/v2/notificationwebhooksservice/test-notification-webhook.md): Send a test payload to the webhook endpoint.
- [Update Notification Webhook](https://docs.semgrep.dev/api-reference/v2/notificationwebhooksservice/update-notification-webhook.md): Update a notification webhook by replacement.
- [List Policies](https://docs.semgrep.dev/api-reference/v2/policiesservice/list-policies.md): List all policies for a given deployment.
- [List Policy Rules](https://docs.semgrep.dev/api-reference/v2/policiesservice/list-policy-rules.md): List the rules for a given policy.
- [Update Policy Rule](https://docs.semgrep.dev/api-reference/v2/policiesservice/update-policy-rule.md): Update a specific rule within a policy.
- [Apply a detection policy](https://docs.semgrep.dev/api-reference/v2/policiesv2service/apply-a-detection-policy.md): Strictly applies a candidate detection policy bundle for one product: the submitted bundle replaces the current state, and exceptions absent from it are deleted. Requires the current state_…
- [Apply remediation policies](https://docs.semgrep.dev/api-reference/v2/policiesv2service/apply-remediation-policies.md): Strictly applies a candidate remediation policies bundle: the submitted list replaces the current state, and policies absent from it are deleted. Requires the current state_version in the I…
- [Get a detection policy](https://docs.semgrep.dev/api-reference/v2/policiesv2service/get-a-detection-policy.md): Returns the detection policy bundle for one product (`code` or `secrets`), including its exceptions, plus the state_version required to apply changes. Returns 404 with code PRODUCT_NOT_ENAB…
- [Get remediation policies](https://docs.semgrep.dev/api-reference/v2/policiesv2service/get-remediation-policies.md): Returns the remediation policies bundle for the deployment plus the state_version required to apply changes. System-managed policies are not included.
- [Get the detection policy summary](https://docs.semgrep.dev/api-reference/v2/policiesv2service/get-the-detection-policy-summary.md): Returns the detection policy bundles and state_versions for every enabled product in one read-only call. Writes always go through the per-product endpoints.
- [Get the policy vocabulary](https://docs.semgrep.dev/api-reference/v2/policiesv2service/get-the-policy-vocabulary.md): Returns the condition types, action types, and value enums this API accepts, so bundles can be validated client-side (for example in CI) without a round trip. Without the product query para…
- [Preview a detection policy apply](https://docs.semgrep.dev/api-reference/v2/policiesv2service/preview-a-detection-policy-apply.md): Validates a candidate detection policy bundle and returns the diff a strict apply would produce, without changing anything. The response includes the state_version the diff was computed aga…
- [Preview a remediation policies apply](https://docs.semgrep.dev/api-reference/v2/policiesv2service/preview-a-remediation-policies-apply.md): Validates a candidate remediation policies bundle and returns the diff a strict apply would produce, without changing anything. The response includes the state_version the diff was computed…
- [Bulk get many Projects' Managed Scan Settings](https://docs.semgrep.dev/api-reference/v2/projectmanagedscansettingsservice/bulk-get-many-projects-managed-scan-settings.md): Finds the user-configurable managed scan settings for the specified projects. Projects without managed scanning set up will have empty values.
- [Get a Project's Managed Scan Settings](https://docs.semgrep.dev/api-reference/v2/projectmanagedscansettingsservice/get-a-projects-managed-scan-settings.md): Finds the user-configurable managed scan settings for the specified project. Returns an empty result if the specified project does not have managed scanning set up.
- [Add Semgrep CI Secrets to GitHub Repositories](https://docs.semgrep.dev/api-reference/v2/projectsservice/add-semgrep-ci-secrets-to-github-repositories.md): Generates and adds a secret for the "semgrep-ci" GitHub Action to the GitHub Repositories that are associated with any Semgrep Projects that match the given filters.
- [Bulk Apply Project Update](https://docs.semgrep.dev/api-reference/v2/projectsservice/bulk-apply-project-update.md): Applies a change to many projects that match the given filters.
- [Bulk Edit Projects](https://docs.semgrep.dev/api-reference/v2/projectsservice/bulk-edit-projects.md): Applies changes to multiple specified projects at once.
- [Delete Project](https://docs.semgrep.dev/api-reference/v2/projectsservice/delete-project.md): Delete a project by its ID. This will delete the project and all of its findings. This action cannot be reversed.
- [Get All Projects IDs by Tag](https://docs.semgrep.dev/api-reference/v2/projectsservice/get-all-projects-ids-by-tag.md): Gets a mapping from tag ID to related project IDs.
- [Get Branch](https://docs.semgrep.dev/api-reference/v2/projectsservice/get-branch.md): Get a branch by its ID.
- [Get Project](https://docs.semgrep.dev/api-reference/v2/projectsservice/get-project.md): Get a project by its ID.
- [Get Project Count](https://docs.semgrep.dev/api-reference/v2/projectsservice/get-project-count.md): Get the number of projects in a deployment.
- [List Projects](https://docs.semgrep.dev/api-reference/v2/projectsservice/list-projects.md): List all projects based on provided filters.
- [Patch Project](https://docs.semgrep.dev/api-reference/v2/projectsservice/patch-project.md): Use a "Merge Patch" to update a project's name or SMS settings.
- [Provision Semgrep CI GitHub Actions](https://docs.semgrep.dev/api-reference/v2/projectsservice/provision-semgrep-ci-github-actions.md): Adds a "semgrep-ci" GitHub Action to the GitHub Repositories that are associated with any Semgrep Projects that match the given filters.
- [Sync All Projects to SCM](https://docs.semgrep.dev/api-reference/v2/projectsservice/sync-all-projects-to-scm.md): Schedules a job to sync all projects in a deployment to their SCM.
- [Sync Project to SCM](https://docs.semgrep.dev/api-reference/v2/projectsservice/sync-project-to-scm.md): Schedules a job to sync a project with its SCM.
- [Get Backlog by Product Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-backlog-by-product-report.md)
- [Get Backlog by Rule Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-backlog-by-rule-report.md)
- [Get Backlog by Severity Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-backlog-by-severity-report.md)
- [Get Findings Activity Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-findings-activity-report.md)
- [Get Findings by Project and Product Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-findings-by-project-and-product-report.md)
- [Get Findings by Project and Severity Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-findings-by-project-and-severity-report.md)
- [Get Findings Funnel Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-findings-funnel-report.md)
- [Get Guardrails Activity Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-guardrails-activity-report.md)
- [Get Guardrails Adoption Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-guardrails-adoption-report.md)
- [Get Malware Firewall Blocked Malicious Dependencies by Advisory Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-malware-firewall-blocked-malicious-dependencies-by-advisory-report.md)
- [Get Malware Firewall Blocked Malicious Dependencies by Dependency, Version, and Ecosystem Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-malware-firewall-blocked-malicious-dependencies-by-dependency-version-and-ecosystem-report.md)
- [Get Malware Firewall Blocked Malicious Dependencies by Ecosystem Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-malware-firewall-blocked-malicious-dependencies-by-ecosystem-report.md)
- [Get Median Open Age by Product Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-median-open-age-by-product-report.md)
- [Get Median Open Age by Severity Report](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-median-open-age-by-severity-report.md)
- [Get Report Findings](https://docs.semgrep.dev/api-reference/v2/reportsservice/get-report-findings.md)
- [Create Review Comment Product Content](https://docs.semgrep.dev/api-reference/v2/reviewcommentproductcontentservice/create-review-comment-product-content.md): Create a new review comment product content
- [Delete Review Comment Product Content](https://docs.semgrep.dev/api-reference/v2/reviewcommentproductcontentservice/delete-review-comment-product-content.md): Delete a review product content by its ID.
- [List Review Comment Product Content](https://docs.semgrep.dev/api-reference/v2/reviewcommentproductcontentservice/list-review-comment-product-content.md): List all review comment product contents
- [Update Review Comment Product Content](https://docs.semgrep.dev/api-reference/v2/reviewcommentproductcontentservice/update-review-comment-product-content.md): Update an existing review comment product content
- [Create ruleboard](https://docs.semgrep.dev/api-reference/v2/ruleboardservice/create-ruleboard.md): Create a new ruleboard for the deployment.
- [Delete ruleboard](https://docs.semgrep.dev/api-reference/v2/ruleboardservice/delete-ruleboard.md): Delete a ruleboard for the deployment.
- [Get ruleboard](https://docs.semgrep.dev/api-reference/v2/ruleboardservice/get-ruleboard.md)
- [Get ruleboard finding counts](https://docs.semgrep.dev/api-reference/v2/ruleboardservice/get-ruleboard-finding-counts.md)
- [Get ruleboard overview](https://docs.semgrep.dev/api-reference/v2/ruleboardservice/get-ruleboard-overview.md)
- [List ruleboards](https://docs.semgrep.dev/api-reference/v2/ruleboardservice/list-ruleboards.md)
- [Update ruleboard](https://docs.semgrep.dev/api-reference/v2/ruleboardservice/update-ruleboard.md)
- [Update ruleboard overview](https://docs.semgrep.dev/api-reference/v2/ruleboardservice/update-ruleboard-overview.md): buf:lint:ignore RPC_REQUEST_RESPONSE_UNIQUE  buf:lint:ignore RPC_RESPONSE_STANDARD_NAME
- [Get Scan](https://docs.semgrep.dev/api-reference/v2/scansservice/get-scan.md): Get a scan by ID.
- [List Scans](https://docs.semgrep.dev/api-reference/v2/scansservice/list-scans.md): List the scans associated with a particular project from the past 30 days.
- [Retry Failed SMS Scans](https://docs.semgrep.dev/api-reference/v2/scansservice/retry-failed-sms-scans.md): Retry one or more failed Semgrep Managed Scans (SMS). Only scans that are SMS and have failed or never finished can be retried. Send a single scan ID or multiple; returns one task per succe…
- [Add Azure DevOps Project](https://docs.semgrep.dev/api-reference/v2/scmappsservice/add-azure-devops-project.md): Add a new ADO project to an existing Entra App install. The service principal must already have permissions on the ADO project
- [Complete Azure DevOps SCM App install](https://docs.semgrep.dev/api-reference/v2/scmappsservice/complete-azure-devops-scm-app-install.md): After the user has uploaded the certificate, verify the Service Principal can authenticate to ADO and create webhook subscriptions required for the integration. Then mark the install as rea…
- [Complete SCMAppRequest](https://docs.semgrep.dev/api-reference/v2/scmappsservice/complete-scmapprequest.md): Complete an SCM app request.
- [Create Azure DevOps SCM App (Service Principal)](https://docs.semgrep.dev/api-reference/v2/scmappsservice/create-azure-devops-scm-app-service-principal.md): Create an ADO ScmApp using Entra ID Service Principal credentials. Generates a key pair server-side and returns the public certificate for the customer to upload to their Entra app registra…
- [Create SCMAppRequest](https://docs.semgrep.dev/api-reference/v2/scmappsservice/create-scmapprequest.md): Create a new SCM app request.
- [Delete SCMApp](https://docs.semgrep.dev/api-reference/v2/scmappsservice/delete-scmapp.md): Delete an SCM app by its ID.
- [Get Public GitHub App status](https://docs.semgrep.dev/api-reference/v2/scmappsservice/get-public-github-app-status.md): Get the status of a public GitHub App.
- [Get SCMApp](https://docs.semgrep.dev/api-reference/v2/scmappsservice/get-scmapp.md): Get an SCM app by its request ID.
- [List SCM Apps](https://docs.semgrep.dev/api-reference/v2/scmappsservice/list-scm-apps.md): List all SCM apps for a deployment.
- [Rotate SCM App Webhook Secret](https://docs.semgrep.dev/api-reference/v2/scmappsservice/rotate-scm-app-webhook-secret.md): Generate a new webhook secret, update it on the SCM provider, and persist it.
- [Check SCMConfig](https://docs.semgrep.dev/api-reference/v2/scmservice/check-scmconfig.md): Check the status of an SCM config.
- [Create SCMConfig](https://docs.semgrep.dev/api-reference/v2/scmservice/create-scmconfig.md): Create a new SCM config.
- [Delete SCMConfig](https://docs.semgrep.dev/api-reference/v2/scmservice/delete-scmconfig.md): Delete an SCM config by its ID.
- [List SCMConfig](https://docs.semgrep.dev/api-reference/v2/scmservice/list-scmconfig.md): List all SCM configs for a deployment.
- [Patch SCMConfig](https://docs.semgrep.dev/api-reference/v2/scmservice/patch-scmconfig.md): Update an existing SCM config.
- [Search SCMConfig](https://docs.semgrep.dev/api-reference/v2/scmservice/search-scmconfig.md): Search for SCM configs for a deployment.
- [Sync SCMConfig](https://docs.semgrep.dev/api-reference/v2/scmservice/sync-scmconfig.md): Sync an SCM config.
- [List SCM Webhook Subscriptions](https://docs.semgrep.dev/api-reference/v2/scmsubscriptionsservice/list-scm-webhook-subscriptions.md): List all SCM webhook subscriptions for a deployment.
- [Rotate SCM Webhook Secret](https://docs.semgrep.dev/api-reference/v2/scmsubscriptionsservice/rotate-scm-webhook-secret.md): Generate a new webhook secret, update it on the SCM provider, and persist it.
- [Subscribe to SCM Webhook](https://docs.semgrep.dev/api-reference/v2/scmsubscriptionsservice/subscribe-to-scm-webhook.md): Subscribe to SCM webhook events.
- [Unsubscribe from SCM Webhook](https://docs.semgrep.dev/api-reference/v2/scmsubscriptionsservice/unsubscribe-from-scm-webhook.md): Unsubscribe from SCM webhook events.
- [Delete Slack Installation](https://docs.semgrep.dev/api-reference/v2/slackservice/delete-slack-installation.md): Deletes Slack app installation and revokes access token
- [Get Slack App Installation URL](https://docs.semgrep.dev/api-reference/v2/slackservice/get-slack-app-installation-url.md): Generates the OAuth URL that initiates the Slack app installation flow
- [Get Slack Channel Mappings](https://docs.semgrep.dev/api-reference/v2/slackservice/get-slack-channel-mappings.md): Retrieves channel mappings for Slack channels
- [Get Slack Installation Details](https://docs.semgrep.dev/api-reference/v2/slackservice/get-slack-installation-details.md): Retrieves Slack app installation details for a deployment
- [Get Slack Notification Mappings](https://docs.semgrep.dev/api-reference/v2/slackservice/get-slack-notification-mappings.md): Retrieves notification mappings for Slack channels
- [Handle Slack OAuth Callback](https://docs.semgrep.dev/api-reference/v2/slackservice/handle-slack-oauth-callback.md): Processes OAuth callback, exchanges code for access token, and stores installation data
- [Create Package Manager Auth Config](https://docs.semgrep.dev/api-reference/v2/smspackagemanagerconfigservice/create-package-manager-auth-config.md): Create a new package manager authentication configuration for a deployment.
- [Delete Package Manager Auth Config](https://docs.semgrep.dev/api-reference/v2/smspackagemanagerconfigservice/delete-package-manager-auth-config.md): Delete a package manager authentication configuration.
- [List Package Manager Auth Configs](https://docs.semgrep.dev/api-reference/v2/smspackagemanagerconfigservice/list-package-manager-auth-configs.md): Retrieve all package manager authentication configurations for a deployment.
- [Update Package Manager Auth Config](https://docs.semgrep.dev/api-reference/v2/smspackagemanagerconfigservice/update-package-manager-auth-config.md): Update an existing package manager authentication configuration.
- [Get SCA Resolution Configs](https://docs.semgrep.dev/api-reference/v2/smsscaresolutionconfigservice/get-sca-resolution-configs.md): Retrieve custom dependency resolution configurations for a given deployment and repository.
- [Generate a project's SBOM](https://docs.semgrep.dev/api-reference/v2/supplychain2service/generate-a-projects-sbom.md): Starts a job to asynchronously generate a Software Bill of Materials (SBOM) for a given project. It does not return the SBOM itself, only schedules the job and returns a task JWT.
- [List dependencies](https://docs.semgrep.dev/api-reference/v2/supplychain2service/list-dependencies.md): Returns all (or filtered) dependencies for a deployment using pagination
- [List dependencies](https://docs.semgrep.dev/api-reference/v2/supplychain2service/list-dependencies-1.md): Returns all (or filtered) dependencies for a deployment using pagination
- [List findings for advisory](https://docs.semgrep.dev/api-reference/v2/supplychain2service/list-findings-for-advisory.md): Returns a summary of findings grouped by project and branch for a specific advisory using pagination
- [List lockfiles with dependencies in a given repository](https://docs.semgrep.dev/api-reference/v2/supplychain2service/list-lockfiles-with-dependencies-in-a-given-repository.md): Returns all (or filtered) lockfiles that contain dependencies within the specified repository
- [List repositories with dependencies](https://docs.semgrep.dev/api-reference/v2/supplychain2service/list-repositories-with-dependencies.md): Returns any repositories which contain dependencies that match the given filter for a deployment
- [Get apisupportcases](https://docs.semgrep.dev/api-reference/v2/supportservice/get-apisupportcases.md)
- [Post apisupportcases](https://docs.semgrep.dev/api-reference/v2/supportservice/post-apisupportcases.md)
- [Get a company survey response](https://docs.semgrep.dev/api-reference/v2/surveysservice/get-a-company-survey-response.md): Retrieves company survey response by survey name
- [Submit company survey response](https://docs.semgrep.dev/api-reference/v2/surveysservice/submit-company-survey-response.md): Responds to company survey
- [Get Task Result](https://docs.semgrep.dev/api-reference/v2/tasksservice/get-task-result.md): Returns the status of a task or task group, and if completed, the result.
- [Check RBAC status](https://docs.semgrep.dev/api-reference/v2/teamsservice/check-rbac-status.md): Indicates if deployment has Role-Based Access Control enabled
- [Create a deployment RBAC team](https://docs.semgrep.dev/api-reference/v2/teamsservice/create-a-deployment-rbac-team.md): Create a new Role-Based Access Control team for a deployment
- [Delete a deployment RBAC team](https://docs.semgrep.dev/api-reference/v2/teamsservice/delete-a-deployment-rbac-team.md): Delete a deployment's Role-Based Access Control team
- [Get a deployment RBAC team](https://docs.semgrep.dev/api-reference/v2/teamsservice/get-a-deployment-rbac-team.md): Get a deployment's Role-Based Access Control team
- [List an RBAC team's child teams](https://docs.semgrep.dev/api-reference/v2/teamsservice/list-an-rbac-teams-child-teams.md): List the child teams assigned to a Role-Based Access Control team
- [List an RBAC team's repositories](https://docs.semgrep.dev/api-reference/v2/teamsservice/list-an-rbac-teams-repositories.md): List the repositories assigned to a Role-Based Access Control team
- [List an RBAC team's users](https://docs.semgrep.dev/api-reference/v2/teamsservice/list-an-rbac-teams-users.md): List the users assigned to a Role-Based Access Control team
- [List deployment teams](https://docs.semgrep.dev/api-reference/v2/teamsservice/list-deployment-teams.md): List a deployment's Role-Based Access Control teams
- [Update a deployment RBAC team](https://docs.semgrep.dev/api-reference/v2/teamsservice/update-a-deployment-rbac-team.md): Update a deployment team's name, users, and repositories
- [Delete tokens](https://docs.semgrep.dev/api-reference/v2/tokenservice/delete-tokens.md): Delete all tokens matching the given filters
- [Get User](https://docs.semgrep.dev/api-reference/v2/usersservice/get-user.md): Get basic information about a User, like role, email, and auth details
- [Get User Settings](https://docs.semgrep.dev/api-reference/v2/usersservice/get-user-settings.md): Get basic settings & onboarding info for a user, like contact preferences and product tour state.
- [List authorized resources](https://docs.semgrep.dev/api-reference/v2/usersservice/list-authorized-resources.md): List all orgnizations/deployments that are available to a user
- [List Joinable Organizations](https://docs.semgrep.dev/api-reference/v2/usersservice/list-joinable-organizations.md): List all organizations/deployments that a user can join
- [List User Organizations](https://docs.semgrep.dev/api-reference/v2/usersservice/list-user-organizations.md): List all organizations/deployments that a user is a member of
- [Update User Settings](https://docs.semgrep.dev/api-reference/v2/usersservice/update-user-settings.md): Update user settings and preferences for the current user
- [Get Project Version Info](https://docs.semgrep.dev/api-reference/v2/versionsservice/get-project-version-info.md): Get Semgrep version information for recent scans
- [Delete apinotificationsdeployments wiz](https://docs.semgrep.dev/api-reference/v2/wizcredentialservice/delete-apinotificationsdeployments-wiz.md)
- [Get apinotificationsdeployments wiz](https://docs.semgrep.dev/api-reference/v2/wizcredentialservice/get-apinotificationsdeployments-wiz.md)
- [Get apinotificationsdeployments wiz 1](https://docs.semgrep.dev/api-reference/v2/wizcredentialservice/get-apinotificationsdeployments-wiz-1.md)
- [Post apinotificationsdeployments wiz](https://docs.semgrep.dev/api-reference/v2/wizcredentialservice/post-apinotificationsdeployments-wiz.md)
- [Post apinotificationsdeployments wizvalidate](https://docs.semgrep.dev/api-reference/v2/wizcredentialservice/post-apinotificationsdeployments-wizvalidate.md)
- [Put apinotificationsdeployments wiz](https://docs.semgrep.dev/api-reference/v2/wizcredentialservice/put-apinotificationsdeployments-wiz.md)
- [Bitbucket PR comments](https://docs.semgrep.dev/category/bitbucket-pr-comments.md)
- [CI references](https://docs.semgrep.dev/category/ci-references.md)
- [CI references](https://docs.semgrep.dev/category/ci-references-1.md)
- [Deployment at scale](https://docs.semgrep.dev/category/deployment-at-scale.md)
- [Glossaries](https://docs.semgrep.dev/category/glossaries.md)
- [Glossaries](https://docs.semgrep.dev/category/glossaries-1.md)
- [Go](https://docs.semgrep.dev/category/go.md): Security guides and cheatsheets for the Go programming language and related frameworks.
- [Java](https://docs.semgrep.dev/category/java.md): Security guides and cheatsheets for the Java programming language and related frameworks.
- [JavaScript](https://docs.semgrep.dev/category/javascript.md): Security guides and cheatsheets for the JavaScript programming language, Node and related frameworks.
- [Language reference](https://docs.semgrep.dev/category/language-reference.md)
- [Language-specific features](https://docs.semgrep.dev/category/language-specific-features.md)
- [Local and CLI scans](https://docs.semgrep.dev/category/local-and-cli-scans.md)
- [PR or MR comments](https://docs.semgrep.dev/category/pr-or-mr-comments.md)
- [Python](https://docs.semgrep.dev/category/python.md): Security guides and cheatsheets for the Python programming language and related frameworks.
- [Ruby](https://docs.semgrep.dev/category/ruby.md): Security guides and cheatsheets for the Ruby programming language and related frameworks.
- [Scan repositories with the AppSec Platform](https://docs.semgrep.dev/category/scan-repositories-with-the-appsec-platform.md)
- [Prevent XSS in Django](https://docs.semgrep.dev/cheat-sheets/django-xss.md)
- [Prevent XSS in ExpressJS](https://docs.semgrep.dev/cheat-sheets/express-xss.md)
- [Prevent XSS for Flask](https://docs.semgrep.dev/cheat-sheets/flask-xss.md)
- [Prevent Command Injection for Go](https://docs.semgrep.dev/cheat-sheets/go-command-injection.md)
- [Prevent XSS for Go](https://docs.semgrep.dev/cheat-sheets/go-xss.md)
- [Prevent Code Injection for Java](https://docs.semgrep.dev/cheat-sheets/java-code-injection.md)
- [Prevent Command Injection for Java](https://docs.semgrep.dev/cheat-sheets/java-command-injection.md)
- [Prevent XSS for Java and Java Server Pages (JSP)](https://docs.semgrep.dev/cheat-sheets/java-jsp-xss.md)
- [Prevent XML External Entity Vulnerabilities for Java](https://docs.semgrep.dev/cheat-sheets/java-xxe.md)
- [Prevent Code Injection in JavaScript](https://docs.semgrep.dev/cheat-sheets/javascript-code-injection.md)
- [Prevent Command Injection for JavaScript](https://docs.semgrep.dev/cheat-sheets/javascript-command-injection.md)
- [Cheat Sheets](https://docs.semgrep.dev/cheat-sheets/overview.md)
- [Prevent Code Injection for Python](https://docs.semgrep.dev/cheat-sheets/python-code-injection.md)
- [Prevent Command Injection for Python](https://docs.semgrep.dev/cheat-sheets/python-command-injection.md)
- [Prevent XSS for Ruby on Rails](https://docs.semgrep.dev/cheat-sheets/rails-xss.md)
- [Prevent Code Injection for Ruby](https://docs.semgrep.dev/cheat-sheets/ruby-code-injection.md)
- [Prevent Command Injection for Ruby](https://docs.semgrep.dev/cheat-sheets/ruby-command-injection.md)
- [CLI reference](https://docs.semgrep.dev/cli-reference.md)
- [Compliance](https://docs.semgrep.dev/compliance/compliance-overview.md): Semgrep provides security tooling that can support compliance efforts, but does not guarantee compliance. Organizations remain responsible for meeting all compliance requirements. Consult w…
- [FedRAMP compliance](https://docs.semgrep.dev/compliance/fedramp.md)
- [GDPR compliance](https://docs.semgrep.dev/compliance/gdpr.md)
- [HIPAA/HITRUST compliance](https://docs.semgrep.dev/compliance/hipaa-hitrust.md)
- [ISO 27017 compliance](https://docs.semgrep.dev/compliance/iso-27017.md)
- [ISO 27001 compliance](https://docs.semgrep.dev/compliance/iso27001.md)
- [NIST 800-171 compliance](https://docs.semgrep.dev/compliance/nist-800-171.md)
- [PCI DSS compliance](https://docs.semgrep.dev/compliance/pci-dss.md)
- [SOC 2 compliance](https://docs.semgrep.dev/compliance/soc2.md)
- [How to add support for a new language](https://docs.semgrep.dev/contributing/adding-a-language.md)
- [Contributing overview](https://docs.semgrep.dev/contributing/contributing.md): Your contributions to Semgrep Community Edition (CE) are welcome!
- [Contributing code](https://docs.semgrep.dev/contributing/contributing-code.md)
- [Contribute rules to the Semgrep Registry](https://docs.semgrep.dev/contributing/contributing-to-semgrep-rules-repository.md)
- [semgrep-cli contributing](https://docs.semgrep.dev/contributing/semgrep-contributing.md)
- [semgrep-core contributing](https://docs.semgrep.dev/contributing/semgrep-core-contributing.md)
- [Semgrep Community Edition (CE) philosophy](https://docs.semgrep.dev/contributing/semgrep-philosophy.md)
- [Semgrep Community Edition (CE) philosophy](https://docs.semgrep.dev/contributing/semgrep-philosophy-1.md)
- [Troubleshooting](https://docs.semgrep.dev/contributing/troubleshooting.md)
- [How to upgrade the grammar for a language](https://docs.semgrep.dev/contributing/updating-a-grammar.md)
- [Customize Semgrep Community Edition (CE) scans](https://docs.semgrep.dev/customize-semgrep-ce.md): This article shows you how to customize your local scans with Semgrep Community Edition (CE). Before proceeding with this article, ensure that you are familiar with [scanning a project usin…
- [Scan with AI-powered detection (beta)](https://docs.semgrep.dev/deployment/add-ai-to-scans.md)
- [Add Semgrep to CI](https://docs.semgrep.dev/deployment/add-semgrep-to-ci.md)
- [Add Semgrep manually to CI providers](https://docs.semgrep.dev/deployment/add-semgrep-to-other-ci-providers.md)
- [Customize a core deployment](https://docs.semgrep.dev/deployment/beyond-core-deployment.md): Now that you've finished your Semgrep core deployment, you can either customize Semgrep's scan behavior or continue to enable additional deployment features. The following sections list com…
- [Pre-deployment checklist](https://docs.semgrep.dev/deployment/checklist.md): Confirm your deployment scope, access, and setup requirements before deploying Semgrep.
- [Claim a license](https://docs.semgrep.dev/deployment/claim-a-license.md): Once you've purchased a subscription, you should receive an email from Semgrep with your license information. Follow the instructions provided in the email to claim your license and begin o…
- [Connect a source code manager](https://docs.semgrep.dev/deployment/connect-scm.md)
- [Core deployment](https://docs.semgrep.dev/deployment/core-deployment.md): Semgrep can be set up to scan repositories of any size.
- [Create a Semgrep account and set up organizations](https://docs.semgrep.dev/deployment/create-account-and-orgs.md)
- [Customize your CI job](https://docs.semgrep.dev/deployment/customize-ci-jobs.md)
- [Scan local repositories and upload findings](https://docs.semgrep.dev/deployment/local-to-scp-scans.md)
- [Manage projects](https://docs.semgrep.dev/deployment/manage-projects.md): View, sort, and tag your projects through the **Projects** page. Refer to this page to manage and troubleshoot thousands of repositories by identifying scan issues or scans with a high numb…
- [Add an Azure DevOps repository to Semgrep Managed Scans](https://docs.semgrep.dev/deployment/managed-scanning/azure.md)
- [Add a Bitbucket repository to Semgrep Managed Scans](https://docs.semgrep.dev/deployment/managed-scanning/bitbucket.md): Add Bitbucket repositories to your Semgrep organization in bulk without adding or changing your existing CI workflows through **Managed Scans**.
- [Add a GitHub repository to Semgrep Managed Scans](https://docs.semgrep.dev/deployment/managed-scanning/github.md): Add GitHub repositories to your Semgrep organization in bulk without adding or changing your existing CI workflows through **Managed Scans**.
- [Add a GitLab repository to Semgrep Managed Scans](https://docs.semgrep.dev/deployment/managed-scanning/gitlab.md): Add GitLab repositories to your Semgrep organization in bulk without adding or changing your existing CI workflows through **Managed Scans**.
- [Semgrep Managed Scans](https://docs.semgrep.dev/deployment/managed-scanning/overview.md): Add repositories to your Semgrep organization in bulk without adding or changing your existing CI workflows through **Managed Scans**. Similar to CI workflows, Managed Scans also integrates…
- [Semgrep Community Edition in CI](https://docs.semgrep.dev/deployment/oss-deployment.md): Semgrep Community Edition (CE) can be set up run static application security testing (SAST) scans on repositories of any size.
- [Network access and allowlists](https://docs.semgrep.dev/deployment/prepare/network-access.md): Configure ingress and egress allowlists, IP addresses, and the Semgrep Network Broker so Semgrep can reach your SCM and related services.
- [Source code manager permissions](https://docs.semgrep.dev/deployment/prepare/scm-permissions.md): Reference for source code manager permissions required by Semgrep features
- [Set a primary branch](https://docs.semgrep.dev/deployment/primary-branch.md)
- [Single-sign on (SSO) configuration](https://docs.semgrep.dev/deployment/sso.md)
- [Manage teams and roles](https://docs.semgrep.dev/deployment/teams/manage.md)
- [Manage user access to projects](https://docs.semgrep.dev/deployment/teams/overview.md): Basic access control, which determines which users can manage Semgrep resources such as scans, projects, and findings, is managed in Semgrep AppSec Platform. This allows you to configure di…
- [Access tokens](https://docs.semgrep.dev/deployment/tokens.md): An access token is a secure credential used to authorize requests to Semgrep AppSec Platform or the Semgrep API without a username and password. Each token is associated with a specific Sem…
- [Extensions](https://docs.semgrep.dev/extensions/overview.md): Several third-party tools include Semgrep extensions.
- [Run scans on pre-commit](https://docs.semgrep.dev/extensions/pre-commit.md)
- [Semgrep IntelliJ extension](https://docs.semgrep.dev/extensions/semgrep-intellij.md)
- [Semgrep Visual Studio Code extension](https://docs.semgrep.dev/extensions/semgrep-vs-code.md)
- [Compare Semgrep to CodeQL](https://docs.semgrep.dev/faq/comparisons/codeql.md): Both Semgrep and CodeQL use static analysis to find bugs, but there are a few differences:
- [Compare Semgrep to Endor Labs](https://docs.semgrep.dev/faq/comparisons/endor-labs.md)
- [Compare Semgrep to Opengrep](https://docs.semgrep.dev/faq/comparisons/opengrep.md)
- [Compare Semgrep to Opengrep](https://docs.semgrep.dev/faq/comparisons/opengrep-1.md)
- [Compare Semgrep to Snyk](https://docs.semgrep.dev/faq/comparisons/snyk.md)
- [Compare Semgrep to SonarQube](https://docs.semgrep.dev/faq/comparisons/sonarqube.md): Both Semgrep and SonarQube use static analysis to find bugs, but there are a few differences:
- [Frequently asked questions](https://docs.semgrep.dev/faq/overview.md)
- [Run local CLI scans](https://docs.semgrep.dev/for-developers/cli.md): You can run local Semgrep CLI scans with the Semgrep command-line tool.
- [How Semgrep works](https://docs.semgrep.dev/for-developers/detection.md): Semgrep enables you to:
- [Run IDE scans](https://docs.semgrep.dev/for-developers/ide.md): Semgrep supports the following IDE extensions:
- [Semgrep for developers](https://docs.semgrep.dev/for-developers/overview.md): This guide is for developers who are using Semgrep in a team or organizational setting.
- [Resolve findings through Semgrep AppSec Platform](https://docs.semgrep.dev/for-developers/resolve-findings-through-app.md): This guide explains how you can view and triage findings in bulk through the Semgrep AppSec Platform web app.
- [Resolve findings in your pull request or merge request](https://docs.semgrep.dev/for-developers/resolve-findings-through-comments.md)
- [Sign in to Semgrep](https://docs.semgrep.dev/for-developers/signin.md)
- [Local scans with Semgrep](https://docs.semgrep.dev/getting-started/cli.md): Learn how to set up Semgrep, scan your project for security issues using Semgrep Code's interfile analysis, and view your findings in the CLI.
- [Quickstart](https://docs.semgrep.dev/getting-started/quickstart.md): Learn how to set up Semgrep, scan your first project, which can be any codebase, repository, or folder within a monorepo, for security issues, and view your findings.
- [Get started with Semgrep Community Edition](https://docs.semgrep.dev/getting-started/quickstart-ce.md): Semgrep Community Edition (CE) is an open source static analysis tool that can find insecure coding patterns and security vulnerabilities in source code. Semgrep CE encompasses a SAST scann…
- [Quickstart for Semgrep Managed Scans](https://docs.semgrep.dev/getting-started/quickstart-managed-scans.md): This quickstart guide will help you set up Semgrep and scan your first project using Semgrep Managed Scans.
- [Supported source code managers](https://docs.semgrep.dev/getting-started/scm-support.md): Semgrep supports the following source code managers (SCM) and plans to varying degrees. Please review the information for your specific SCM and plan to see what Semgrep features are availab…
- [Semgrep Guardian: AI coding agent security plugin](https://docs.semgrep.dev/guardian.md): Set up Semgrep Guardian to scan AI-generated code and catch security issues before they ship.
- [Ignore files, folders, and code](https://docs.semgrep.dev/ignoring-files-folders-code.md)
- [Semgrep Docs](https://docs.semgrep.dev/index.md): Get started with Semgrep to help you catch, flag, and fix real vulnerabilities before they ship.
- [Semgrep integration guide for partners](https://docs.semgrep.dev/integrating.md): We're excited that you're integrating Semgrep into your tooling! Our goal with Semgrep is to bring world-class security tools to developers based on our conviction that software will run th…
- [Introduction to Semgrep](https://docs.semgrep.dev/introduction.md): Semgrep is a software security tool that provides static application security testing (SAST), software composition analysis (SCA), and secrets detection. Semgrep identifies vulnerabilities…
- [Knowledge base](https://docs.semgrep.dev/kb.md)
- [Integrations](https://docs.semgrep.dev/kb/integrations.md)
- [Customize Semgrep in pre-commit](https://docs.semgrep.dev/kb/integrations/customize-semgrep-precommit.md)
- [How to connect Semgrep and DefectDojo](https://docs.semgrep.dev/kb/integrations/defect-dojo-integration.md)
- [How to paginate responses from the Semgrep API](https://docs.semgrep.dev/kb/integrations/pagination.md)
- [Rules](https://docs.semgrep.dev/kb/rules.md)
- [Change rule severity and other metadata by forking rules](https://docs.semgrep.dev/kb/rules/changing-rule-severity-and-other-metadata.md)
- [Matching multiple tokens with ellipsis metavariables](https://docs.semgrep.dev/kb/rules/ellipsis-metavariables.md)
- [How to exclude certain file types for a particular rule](https://docs.semgrep.dev/kb/rules/exclude_rule_for_certain_filetypes.md)
- [Match the absence of something in a file](https://docs.semgrep.dev/kb/rules/match-absence.md)
- [Match comments with Semgrep](https://docs.semgrep.dev/kb/rules/match-comments.md)
- [Fix pattern parse errors when running rules](https://docs.semgrep.dev/kb/rules/pattern-parse-error.md)
- [Rule upgrades and supersession](https://docs.semgrep.dev/kb/rules/pro-vs-community-secrets-vs-code-rules.md): This article describes Semgrep behavior when multiple rules match the same issue in the same code. Overlap can occur when you scan your project with Semgrep Code using similar **Pro** and *…
- [Performance principles for rules and files to abide by when scanning repositories](https://docs.semgrep.dev/kb/rules/rule-file-perf-principles.md)
- [Why do new rules keep appearing in Comment or Block mode?](https://docs.semgrep.dev/kb/rules/ruleset-default-mode.md)
- [Run all available rules on a repository](https://docs.semgrep.dev/kb/rules/run-all-available-rules.md)
- [How does Semgrep assign severity levels to rules?](https://docs.semgrep.dev/kb/rules/understand-severities.md)
- [My rule with pattern-not doesn't work: using pattern-not-inside](https://docs.semgrep.dev/kb/rules/using-pattern-not-inside.md)
- [Use the Semgrep rule schema to write rules in VS Code](https://docs.semgrep.dev/kb/rules/using-semgrep-rule-schema-in-vscode.md)
- [Semgrep AppSec Platform](https://docs.semgrep.dev/kb/semgrep-appsec-platform.md)
- [What does 'Act on your behalf' mean?](https://docs.semgrep.dev/kb/semgrep-appsec-platform/act-on-your-behalf.md)
- [Web API error 404 and token scopes](https://docs.semgrep.dev/kb/semgrep-appsec-platform/api-404-token-scope.md)
- [Automate private rules deployment using the Semgrep API](https://docs.semgrep.dev/kb/semgrep-appsec-platform/automate-rules-deployment.md)
- [Why can't I access my Semgrep organization after logging in with GitHub?](https://docs.semgrep.dev/kb/semgrep-appsec-platform/cannot-access-semgrep-after-github-login.md)
- [Why does the Projects page display a different dependency count from the Dependencies page?](https://docs.semgrep.dev/kb/semgrep-appsec-platform/dependency-count-differ-platform.md): The **Projects** page displays the count of individual dependency entries in the latest full scan for the project. The **Dependencies** page shows only unique entries for a dependency, taki…
- [error: externally-managed-environment](https://docs.semgrep.dev/kb/semgrep-appsec-platform/error-externally-managed-environment.md): If your Python environment is [externally managed by a package manager](https://packaging.python.org/en/latest/specifications/externally-managed-environments/), you can't use `pip` for syst…
- [FedRAMP authorization boundary for code scanning services like Semgrep](https://docs.semgrep.dev/kb/semgrep-appsec-platform/fedramp-with-semgrep.md): At Semgrep, we understand the importance of staying within the FedRAMP Authorization Boundary guidelines, especially when it comes to code security and scanning services. Many other compani…
- [Why do the findings count differ in the API and the Semgrep AppSec Platform UI?](https://docs.semgrep.dev/kb/semgrep-appsec-platform/findings-count-differ-api-platform.md)
- [Why are findings counts different across Semgrep AppSec Platform pages?](https://docs.semgrep.dev/kb/semgrep-appsec-platform/findings-count-differ-platform.md): You may see different findings counts across the [Dashboard](/semgrep-appsec-platform/dashboard), [Projects](/deployment/manage-projects), [Scans](/deployment/manage-projects#scan-details-a…
- [Why did the comments on a PR or MR not appear inline?](https://docs.semgrep.dev/kb/semgrep-appsec-platform/inline-pr-comments.md): When Semgrep comments on PR or MR findings, the comments are usually posted on the line of code where the finding is identified (inline). However, there are two common reasons why comments…
- [Why is my repository not receiving PR or MR comments?](https://docs.semgrep.dev/kb/semgrep-appsec-platform/missing-pr-comments.md): If you have configured Semgrep in CI and Semgrep AppSec Platform to create comments when a rule generates a finding in a PR or MR, but you are not seeing those comments, review the followin…
- [Semgrep Managed Scans doesn't run for pull requests in GitHub merge queues](https://docs.semgrep.dev/kb/semgrep-appsec-platform/no-runs-in-github-merge-queues.md)
- [Why are my projects showing a status of 'Not yet started' after I enable Managed Scans?](https://docs.semgrep.dev/kb/semgrep-appsec-platform/projects-not-yet-started-sms.md): When onboarding a large number of projects to Semgrep Managed Scans (SMS), users may notice that many of them show a 'Not yet started' status, even after enabling Managed Scans. This is bec…
- [Remove users from your Semgrep AppSec Platform organization](https://docs.semgrep.dev/kb/semgrep-appsec-platform/remove-users.md)
- [How to re-run a Semgrep Managed Scan](https://docs.semgrep.dev/kb/semgrep-appsec-platform/rerun-managed-scans.md)
- [SAML SSO error: There is no AttributeStatement on the Response](https://docs.semgrep.dev/kb/semgrep-appsec-platform/saml-attributestatement.md)
- [SAML SSO Error: Authentication method doesn't match requested](https://docs.semgrep.dev/kb/semgrep-appsec-platform/saml-authentication-method-match.md)
- [SAML SSO Error: Signature validation failed](https://docs.semgrep.dev/kb/semgrep-appsec-platform/saml-bad-signature.md)
- [SAML SSO with Google Workspace](https://docs.semgrep.dev/kb/semgrep-appsec-platform/saml-google-workspace.md)
- [SAML SSO with Microsoft Entra ID](https://docs.semgrep.dev/kb/semgrep-appsec-platform/saml-microsoft-entra-id.md)
- [Troubleshooting SAML SSO](https://docs.semgrep.dev/kb/semgrep-appsec-platform/saml-stops-working.md): This article walks you through troubleshooting SAML SSO failures, including the case where your SAML configuration stops working after you've successfully configured it and used it for some…
- [Why is the scan duration reported by Semgrep different from the scan duration of the end-to-end process of running a diff-aware managed scan?](https://docs.semgrep.dev/kb/semgrep-appsec-platform/scan-duration-discrepancy.md): The **Duration** of a scan shown on Semgrep AppSec Platform's **Projects** page reflects the amount of time required to run the Semgrep scan. This timer begins when Semgrep sends the scan r…
- [Search, filter, and sort findings in Semgrep AppSec Platform](https://docs.semgrep.dev/kb/semgrep-appsec-platform/search-filter-sort-findings.md): Semgrep AppSec Platform provides you with an overview of the findings identified by Semgrep Code, Supply Chain, and Secrets. Each product-specific page provides you with filters to narrow d…
- [The semgrep login command doesn't redirect to my Semgrep tenant site"](https://docs.semgrep.dev/kb/semgrep-appsec-platform/semgrep-login-cli-tenant.md)
- [SAML SSO error BadRequest: Missing attribute](https://docs.semgrep.dev/kb/semgrep-appsec-platform/sso-attribute-error.md): When setting up SAML-based SSO for Semgrep AppSec Platform, you may see the following error:
- [Semgrep in CI](https://docs.semgrep.dev/kb/semgrep-ci.md)
- [Semgrep with self-hosted Ubuntu runners in Azure Pipelines](https://docs.semgrep.dev/kb/semgrep-ci/azure-self-hosted-ubuntu.md)
- [Running Semgrep using templates in Azure Pipelines](https://docs.semgrep.dev/kb/semgrep-ci/azure-using-templates-with-semgrep.md)
- [Run Semgrep in Jenkins when using Bitbucket as the source code manager](https://docs.semgrep.dev/kb/semgrep-ci/bitbucket-jenkins.md)
- [Semgrep in CI vs CLI: align your SAST scan results and understand differences](https://docs.semgrep.dev/kb/semgrep-ci/ci-vs-cli.md)
- [Collecting Semgrep GitHub Actions logs from GitHub](https://docs.semgrep.dev/kb/semgrep-ci/collect-gha-logs.md)
- [GitLab Job's log exceeded limit' error](https://docs.semgrep.dev/kb/semgrep-ci/collect-gitlab-logs.md)
- [Failed to run a git command during a pull request or merge request scan](https://docs.semgrep.dev/kb/semgrep-ci/git-command-errors.md)
- [Use GitHub repository rulesets to implement Semgrep](https://docs.semgrep.dev/kb/semgrep-ci/github-repository-rulesets-semgrep.md)
- [Set up reusable GitHub workflows for Semgrep scans](https://docs.semgrep.dev/kb/semgrep-ci/github-reusable-workflows-semgrep.md)
- [Why aren't findings populating in the GitHub Advanced Security Dashboard after running Semgrep in CI?](https://docs.semgrep.dev/kb/semgrep-ci/github-upload-findings-in-security-dashboard.md): When scanning with Semgrep in CI, findings automatically populate in Semgrep AppSec Platform. To show findings in the GitHub Advanced Security Dashboard, run an alternate job that uploads f…
- [Scan GitHub projects in Jenkins](https://docs.semgrep.dev/kb/semgrep-ci/jenkins-diff-scans.md)
- [Receive Semgrep MR comments through a GitLab runner](https://docs.semgrep.dev/kb/semgrep-ci/mr-comments-through-gitlab-runner.md)
- [Why are there new source code manager (SCM) connections that I didn't manually configure listed in Semgrep AppSec Platform?](https://docs.semgrep.dev/kb/semgrep-ci/new-scm-connections.md)
- [Does Semgrep scan compressed files or other non-code files?](https://docs.semgrep.dev/kb/semgrep-ci/scan-compressed-files-artifacts.md)
- [Scanning a monorepo in parts](https://docs.semgrep.dev/kb/semgrep-ci/scan-monorepo-in-parts.md)
- [Add Semgrep to your Semaphore pipeline](https://docs.semgrep.dev/kb/semgrep-ci/semaphore-pipelines.md)
- [How to trigger diff-aware scans](https://docs.semgrep.dev/kb/semgrep-ci/trigger-diff-scans-env-var.md)
- [Upload Semgrep CI findings to GitHub Advanced Security Dashboard](https://docs.semgrep.dev/kb/semgrep-ci/upload-ci-findings-to-github.md)
- [Upload Semgrep CI findings to GitLab Security Dashboard](https://docs.semgrep.dev/kb/semgrep-ci/upload-ci-findings-to-gitlab.md)
- [Configure GitHub Actions to use the nonroot Semgrep docker image](https://docs.semgrep.dev/kb/semgrep-ci/using-nonroot-docker-image-with-gha.md)
- [Why are duplicate findings appearing after running Semgrep in CI?](https://docs.semgrep.dev/kb/semgrep-ci/why-duplicate-findings.md)
- [Semgrep Code](https://docs.semgrep.dev/kb/semgrep-code.md)
- [Troubleshoot ValueError: Invalid header value error](https://docs.semgrep.dev/kb/semgrep-code/InvalidHeaderValue.md)
- [How to collect logs when running Semgrep in CLI](https://docs.semgrep.dev/kb/semgrep-code/collect-cli-logs.md): When troubleshooting Semgrep scans on the command line interface (CLI), collecting and sharing logs can be extremely helpful. By default, Semgrep prints findings from a scan to `stdout`, an…
- [Why isn’t Semgrep reporting all my tainted data flows?](https://docs.semgrep.dev/kb/semgrep-code/finding_all_taints.md): One of the reasons behind seeing fewer than expected tainted data flows could be the principle of reporting on shortest paths only.
- [My GitLab pipeline says that the token is invalid, but it is valid](https://docs.semgrep.dev/kb/semgrep-code/gitlab-group-variables.md)
- [Reduce false positives in semgrep scan](https://docs.semgrep.dev/kb/semgrep-code/reduce-false-positives.md): The `semgrep scan` command can be used to quickly perform SAST scans. However, you may encounter false positives as you work through your findings. This document presents different strategi…
- [How to run different versions of Semgrep](https://docs.semgrep.dev/kb/semgrep-code/run-specific-version.md): However, when testing or managing upgrades, it can be helpful to run different versions of Semgrep to compare behavior.
- [Troubleshooting 'You are seeing this because the engine was killed' on monorepos](https://docs.semgrep.dev/kb/semgrep-code/scan-engine-kill.md): Scans can fail to complete on large monorepos. This article describes possible solutions, such as:
- [A Semgrep scan is having a problem - what next?](https://docs.semgrep.dev/kb/semgrep-code/semgrep-scan-troubleshooting.md): If a Semgrep scan is failing or running slowly,
- [Why am I getting findings in files that should be ignored?](https://docs.semgrep.dev/kb/semgrep-code/semgrepignore-ignored.md): If you don't have a `.semgrepignore` file, see our [guide on how to exclude files from Semgrep scans](/ignoring-files-folders-code).
- [Support for all versions of a programming language](https://docs.semgrep.dev/kb/semgrep-code/support-for-language-versions.md): Semgrep language support has several levels of maturity. The **Generally available (GA)** maturity level means that Semgrep broadly supports all versions of that programming language.
- [Why are there more Semgrep findings when the code hasn't changed?](https://docs.semgrep.dev/kb/semgrep-code/unexpected-new-findings.md): If the rules you're using in Semgrep have changed since you last performed a full scan of your project, you may see more findings for the project even if your code has not changed.
- [Semgrep Multimodal](https://docs.semgrep.dev/kb/semgrep-multimodal.md)
- [Azure OpenAI: Error 429 - Max Tokens Exceeded](https://docs.semgrep.dev/kb/semgrep-multimodal/azure-openai-error-429.md)
- [Missing PR or MR comments from Semgrep Multimodal.](https://docs.semgrep.dev/kb/semgrep-multimodal/missing-pr-mr-comments.md)
- [Semgrep Secrets](https://docs.semgrep.dev/kb/semgrep-secrets.md)
- [Why didn't Semgrep Secrets find these example secrets?](https://docs.semgrep.dev/kb/semgrep-secrets/no-example-secrets-found.md): One common pattern in code is to include a placeholder value or format indicator for a secret rather than a real secret value. Where possible, Semgrep Secrets rules are intentionally writte…
- [Why didn't Semgrep ignore the files and folders in the Secrets Path ignores for this project?](https://docs.semgrep.dev/kb/semgrep-secrets/per-product-ignore-not-working.md): The Semgrep AppSec Platform allows you to [define ignore patterns](/ignoring-files-folders-code#define-ignored-files-and-folders-in-semgrep-appsec-platform) for different Semgrep products f…
- [Semgrep Supply Chain (SSC)](https://docs.semgrep.dev/kb/semgrep-supply-chain.md)
- [Connect a private registry to Semgrep](https://docs.semgrep.dev/kb/semgrep-supply-chain/connect-a-private-registry.md)
- [How to exclude a Semgrep Supply Chain rule from a scan](https://docs.semgrep.dev/kb/semgrep-supply-chain/exclude-rule.md)
- [Malware incident response with Semgrep Supply Chain](https://docs.semgrep.dev/kb/semgrep-supply-chain/incident-response.md): This document describes how to respond to a malicious dependency incident using Semgrep Supply Chain.
- [No dependencies appear on the Dependencies page](https://docs.semgrep.dev/kb/semgrep-supply-chain/no-dependency-results.md)
- [Semgrep is not displaying Upgrade guidance or Autofix functionality](https://docs.semgrep.dev/kb/semgrep-supply-chain/no-upgrade-guidance-or-autofix.md)
- [How to scan multiple or nested manifest files or lockfiles](https://docs.semgrep.dev/kb/semgrep-supply-chain/scanning_multiple_lockfiles.md): Semgrep Supply Chain uses manifest files or lockfiles as part of its reachability analysis to determine the exact version of a dependency that a codebase is using. Semgrep parses manifest f…
- [Generate manifest files or lockfiles for Semgrep Supply Chain in a Circle CI pipeline](https://docs.semgrep.dev/kb/semgrep-supply-chain/ssc-lockfiles-circleci.md): In CircleCI, you can generate a manifest file or lockfile for your project as part of your pipeline job. This step happens during the first job, then the manifest file or lockfile is passed…
- [Generating Python lockfiles for Semgrep Supply Chain scans](https://docs.semgrep.dev/kb/semgrep-supply-chain/ssc-python-lockfiles.md)
- [Why aren't Supply Chain findings showing?](https://docs.semgrep.dev/kb/semgrep-supply-chain/why-no-findings.md)
- [C# support](https://docs.semgrep.dev/languages/csharp.md)
- [Go support](https://docs.semgrep.dev/languages/go.md)
- [Java support](https://docs.semgrep.dev/languages/java.md)
- [JavaScript support](https://docs.semgrep.dev/languages/javascript.md)
- [Kotlin support](https://docs.semgrep.dev/languages/kotlin.md)
- [Python support](https://docs.semgrep.dev/languages/python.md)
- [Ruby support](https://docs.semgrep.dev/languages/ruby.md)
- [Scala support](https://docs.semgrep.dev/languages/scala.md)
- [Swift support](https://docs.semgrep.dev/languages/swift.md)
- [Semgrep Learning Guides](https://docs.semgrep.dev/learn.md)
- [Security Foundations](https://docs.semgrep.dev/learn/security-foundations/overview.md): This section includes conceptual guides on application security essentials. These fundamental concepts can help strengthen your organization's security posture and can be a helpful referenc…
- [Understanding static code scanning tools](https://docs.semgrep.dev/learn/security-foundations/sast/overview.md)
- [Incorporating security testing into development workflows](https://docs.semgrep.dev/learn/security-foundations/security-testing-workflow.md)
- [Understanding supply chain security](https://docs.semgrep.dev/learn/security-foundations/supply-chain-security.md)
- [Code Injection](https://docs.semgrep.dev/learn/vulnerabilities/code-injection.md): An attacker's ultimate goal is often to escalate a vulnerability into something as impactful as possible. The most dangerous outcome is arbitrary code execution, and few vulnerabilities pro…
- [Command Injection](https://docs.semgrep.dev/learn/vulnerabilities/command-injection.md)
- [Command Injection in Argo Workflows](https://docs.semgrep.dev/learn/vulnerabilities/command-injection/argo-injection.md)
- [Injection Attacks in GitHub Actions](https://docs.semgrep.dev/learn/vulnerabilities/command-injection/github-actions-injection.md)
- [Cross-Site Scripting (XSS)](https://docs.semgrep.dev/learn/vulnerabilities/cross-site-scripting.md)
- [Insecure Direct Object Reference (IDOR)](https://docs.semgrep.dev/learn/vulnerabilities/idor.md): Imagine you’re browsing your order history in an online store. You notice the URL includes an order ID, and out of curiosity, you try changing the number to see what happens.
- [Insecure Deserialization](https://docs.semgrep.dev/learn/vulnerabilities/insecure-deserialization.md)
- [Insecure Deserialization in Python](https://docs.semgrep.dev/learn/vulnerabilities/insecure-deserialization/python.md)
- [Open Redirect](https://docs.semgrep.dev/learn/vulnerabilities/open-redirect.md)
- [Understanding Security Vulnerabilities](https://docs.semgrep.dev/learn/vulnerabilities/overview.md)
- [Server Side Request Forgery (SSRF)](https://docs.semgrep.dev/learn/vulnerabilities/server-side-request-forgery.md)
- [SQL Injection](https://docs.semgrep.dev/learn/vulnerabilities/sql-injection.md)
- [XML Security](https://docs.semgrep.dev/learn/vulnerabilities/xml-security.md)
- [Licensing](https://docs.semgrep.dev/licensing.md): The following is a list of products offered by Semgrep, Inc., along with their license information.
- [Semgrep metrics](https://docs.semgrep.dev/metrics.md): Semgrep CLI may collect aggregate metrics to help improve the product. This document describes:
- [Semgrep metrics](https://docs.semgrep.dev/metrics-1.md): Semgrep CLI may collect aggregate metrics to help improve the product. This document describes:
- [Prerequisites](https://docs.semgrep.dev/prerequisites.md): This document details the required software or services to run Semgrep products.
- [Feature definitions](https://docs.semgrep.dev/references/feature-definitions.md)
- [Language maturity levels](https://docs.semgrep.dev/references/language-maturity-levels.md)
- [April 2025](https://docs.semgrep.dev/release-notes/april-2025.md): April 30, 2025 · 4 min read
- [April 2026](https://docs.semgrep.dev/release-notes/april-2026.md): May 12, 2026 · 8 min read
- [August 2025](https://docs.semgrep.dev/release-notes/august-2025.md): September 3, 2025 · 3 min read
- [December 2025](https://docs.semgrep.dev/release-notes/december-2025.md): January 13, 2026 · 7 min read
- [February 2026](https://docs.semgrep.dev/release-notes/february-2026.md): March 6, 2026 · 4 min read
- [Semgrep release notes](https://docs.semgrep.dev/release-notes/index.md): Product updates and release notes for Semgrep Code, Supply Chain, Secrets, and AppSec Platform.
- [January 2026](https://docs.semgrep.dev/release-notes/january-2026.md): February 4, 2026 · 4 min read
- [July 2025](https://docs.semgrep.dev/release-notes/july-2025.md): August 8, 2025 · 5 min read
- [June 2025](https://docs.semgrep.dev/release-notes/june-2025.md): July 18, 2025 · 6 min read
- [June 2026](https://docs.semgrep.dev/release-notes/june-2026.md): July 8, 2026 · 7 min read
- [March 2026](https://docs.semgrep.dev/release-notes/march-2026.md): April 10, 2026 · 8 min read
- [May 2025](https://docs.semgrep.dev/release-notes/may-2025.md): May 30, 2025 · 5 min read
- [November 2025](https://docs.semgrep.dev/release-notes/november-2025.md): December 9, 2025 · 6 min read
- [October 2025](https://docs.semgrep.dev/release-notes/october-2025.md): November 11, 2025 · 3 min read
- [September 2025](https://docs.semgrep.dev/release-notes/september-2025.md): October 23, 2025 · 3 min read
- [Run a successful proof-of-value (POV) trial with Semgrep](https://docs.semgrep.dev/run-a-successful-pov.md)
- [Run a successful proof-of-value (POV) trial with Semgrep](https://docs.semgrep.dev/run-a-successful-pov-1.md)
- [Run rules](https://docs.semgrep.dev/running-rules.md): This document explains how to use local Semgrep rules when scanning your project.
- [Custom rules for secure guardrails](https://docs.semgrep.dev/secure-guardrails/custom-guardrails-rules.md): You can create custom Semgrep rules and deploy them as guardrails to enforce your organization's secure coding conventions.
- [Secure defaults](https://docs.semgrep.dev/secure-guardrails/secure-defaults.md)
- [Secure guardrails in Semgrep](https://docs.semgrep.dev/secure-guardrails/secure-guardrails-in-semgrep.md): Secure guardrails guide **developers** towards fixing security issues in the early stages of development. By deploying secure guardrails, you can:
- [Security](https://docs.semgrep.dev/security.md)
- [Enable Azure pull request comments](https://docs.semgrep.dev/semgrep-appsec-platform/azure-pr-comments.md)
- [Enable Bitbucket Cloud pull request comments](https://docs.semgrep.dev/semgrep-appsec-platform/bitbucket-cloud-pr-comments.md)
- [Enable Bitbucket Data Center pull request comments](https://docs.semgrep.dev/semgrep-appsec-platform/bitbucket-data-center-pr-comments.md)
- [View exposure and runtime context from Cortex by Palo Alto Networks](https://docs.semgrep.dev/semgrep-appsec-platform/cortex.md): The Semgrep Cortex integration can ingest exposure and runtime context from your Cortex instance in Semgrep AppSec Platform. This allows you to prioritize findings based on deployment statu…
- [Dashboard](https://docs.semgrep.dev/semgrep-appsec-platform/dashboard.md)
- [Receive email notifications](https://docs.semgrep.dev/semgrep-appsec-platform/email-notifications.md): You can receive emails from Semgrep regarding **new findings** and **failed scans**.
- [Set up GitHub pull request comments](https://docs.semgrep.dev/semgrep-appsec-platform/github-pr-comments.md)
- [Set up GitLab merge request comments](https://docs.semgrep.dev/semgrep-appsec-platform/gitlab-mr-comments.md)
- [Create Jira tickets](https://docs.semgrep.dev/semgrep-appsec-platform/jira.md): The Semgrep Jira integration allows you to create Jira tickets based on your Semgrep Code, Supply Chain, and Secrets findings.
- [Semgrep JSON and SARIF fields](https://docs.semgrep.dev/semgrep-appsec-platform/json-and-sarif.md): This reference provides Semgrep fields for JSON and SARIF output.
- [Alerts and notifications](https://docs.semgrep.dev/semgrep-appsec-platform/notifications.md): You can receive notifications for Semgrep findings in the following channels:
- [Enable source code manager code access](https://docs.semgrep.dev/semgrep-appsec-platform/scm-code-access.md)
- [Receive Slack notifications](https://docs.semgrep.dev/semgrep-appsec-platform/slack-notifications.md)
- [View runtime context from Sysdig](https://docs.semgrep.dev/semgrep-appsec-platform/sysdig.md): The Semgrep Sysdig integration can ingest runtime context from your Sysdig account into Semgrep AppSec Platform. This allows you to prioritize findings based on deployment status.
- [Tag projects](https://docs.semgrep.dev/semgrep-appsec-platform/tags.md): Tagging enables you to group projects together based on your organization's unique business structure or needs. By tagging projects, you are able to quickly apply Supply Chain policies and…
- [Create and manage unified policies](https://docs.semgrep.dev/semgrep-appsec-platform/unified-policies/get-started.md)
- [Unified policies](https://docs.semgrep.dev/semgrep-appsec-platform/unified-policies/overview.md)
- [Enable webhooks](https://docs.semgrep.dev/semgrep-appsec-platform/webhooks.md): Webhooks are a generic method for Semgrep AppSec Platform to post JSON-formatted findings after each scan to your URL endpoint.
- [View Semgrep findings in Wiz's Security Graph](https://docs.semgrep.dev/semgrep-appsec-platform/wiz.md)
- [Supported languages for Semgrep Community Edition (CE)](https://docs.semgrep.dev/semgrep-ce-languages.md): This document provides information about supported languages for Semgrep Code and Semgrep CE.
- [Continuous integration (CI) environment variables](https://docs.semgrep.dev/semgrep-ci/ci-environment-variables.md)
- [Continuous integration (CI) environment variables](https://docs.semgrep.dev/semgrep-ci/ci-environment-variables-1.md)
- [Handling blocking findings and errors](https://docs.semgrep.dev/semgrep-ci/configuring-blocking-and-errors-in-ci.md): This article documents how Semgrep handles blocking findings and errors and how you can change Semgrep's default behavior.
- [Findings in CI](https://docs.semgrep.dev/semgrep-ci/findings-ci.md): When running any Semgrep product in CI, Semgrep is able to track the lifetime of an individual finding. When configured to perform a diff-aware scan, Semgrep only shows new findings relativ…
- [Findings in CI](https://docs.semgrep.dev/semgrep-ci/findings-ci-1.md): When running any Semgrep product in CI, Semgrep is able to track the lifetime of an individual finding. When configured to perform a diff-aware scan, Semgrep only shows new findings relativ…
- [Set up the Semgrep Network Broker](https://docs.semgrep.dev/semgrep-ci/network-broker.md): The Semgrep Network Broker facilitates secure access between Semgrep and your private network. The Network Broker creates a WireGuard VPN tunnel to the Semgrep backend and proxies **inbound…
- [Packages in the Semgrep docker image](https://docs.semgrep.dev/semgrep-ci/packages-in-semgrep-docker.md)
- [Packages in the Semgrep docker image](https://docs.semgrep.dev/semgrep-ci/packages-in-semgrep-docker-1.md)
- [Sample continuous integration (CI) configurations](https://docs.semgrep.dev/semgrep-ci/sample-ci-configs.md): This document provides sample configuration snippets to run Semgrep CI on various continuous integration (CI) providers.
- [Sample continuous integration (CI) configurations](https://docs.semgrep.dev/semgrep-ci/sample-ci-configs-1.md): This document provides sample configuration snippets to run Semgrep CI on various continuous integration (CI) providers.
- [AI-powered detection (beta) overview](https://docs.semgrep.dev/semgrep-code/ai-powered-detection-concepts.md)
- [ Write rules using Semgrep Editor](https://docs.semgrep.dev/semgrep-code/editor.md)
- [View findings' details](https://docs.semgrep.dev/semgrep-code/finding-details.md)
- [View findings in Semgrep AppSec Platform](https://docs.semgrep.dev/semgrep-code/findings.md)
- [Semgrep Code product terms](https://docs.semgrep.dev/semgrep-code/glossary.md): The terms and definitions provided here are specific to Semgrep Code.
- [Semantic detection in Java](https://docs.semgrep.dev/semgrep-code/java.md): This document explains how Semgrep detects true positives and reduces false positives in Java.
- [Semgrep Code overview](https://docs.semgrep.dev/semgrep-code/overview.md)
- [Manage rules and policies](https://docs.semgrep.dev/semgrep-code/policies.md)
- [Semgrep Pro rules](https://docs.semgrep.dev/semgrep-code/pro-rules.md)
- [Remove duplicate findings](https://docs.semgrep.dev/semgrep-code/remove-duplicates.md): Semgrep scans are performed on both mainline (trunk) and non-mainline branches. The scope of the scan can differ depending on if Semgrep is called on a mainline or non-mainline branch.
- [Cross-file analysis examples](https://docs.semgrep.dev/semgrep-code/semgrep-pro-engine-examples.md)
- [Perform cross-file analysis](https://docs.semgrep.dev/semgrep-code/semgrep-pro-engine-intro.md): Use Semgrep Code's **cross-file (interfile) analysis** to detect vulnerabilities across files and folders within a project.
- [Triage and remediate findings](https://docs.semgrep.dev/semgrep-code/triage-remediation.md): This article shows you how to manage and triage findings identified by Semgrep Code using Semgrep AppSec Platform. The specific actions available to you when managing your findings include:
- [Autofix for Semgrep Code (beta)](https://docs.semgrep.dev/semgrep-code/triage-remediation/autofix.md): Semgrep’s Autofix feature uses AI to generate proposed code changes for Semgrep Code findings and open a draft pull or merge request.
- [Analyze Code findings](https://docs.semgrep.dev/semgrep-multimodal/analyze.md)
- [Best practices for writing Memories](https://docs.semgrep.dev/semgrep-multimodal/best-practices-for-memories.md): This page covers various best practices for writing Memories.
- [Customize Semgrep Multimodal](https://docs.semgrep.dev/semgrep-multimodal/customize.md): You can customize Semgrep Multimodal by enabling and using the features detailed on this page.
- [Enable Semgrep Multimodal](https://docs.semgrep.dev/semgrep-multimodal/getting-started.md): Semgrep Multimodal extends standard Semgrep capabilities by providing contextually aware AI-powered vulnerability detection and remediation suggestions.
- [Semgrep Multimodal metrics and methodology](https://docs.semgrep.dev/semgrep-multimodal/metrics.md): Metrics for evaluating Semgrep Multimodal's performance are derived from two sources:
- [Semgrep Multimodal overview](https://docs.semgrep.dev/semgrep-multimodal/overview.md): Semgrep Multimodal adds AI-driven capabilities to Semgrep, including AI-powered detection, triage, and remediation of your findings.
- [Data privacy and legal considerations](https://docs.semgrep.dev/semgrep-multimodal/privacy.md): Semgrep Multimodal uses API permissions to access code in your selected GitHub or GitLab repositories. To provide AI-powered functionality, portions of the source code are processed by Semg…
- [Semgrep AppSec Platform versus Semgrep Community Edition](https://docs.semgrep.dev/semgrep-pro-vs-oss.md)
- [Semgrep AppSec Platform versus Semgrep Community Edition](https://docs.semgrep.dev/semgrep-pro-vs-oss-1.md)
- [Semgrep Secrets overview](https://docs.semgrep.dev/semgrep-secrets/conceptual-overview.md)
- [View findings details](https://docs.semgrep.dev/semgrep-secrets/finding-details.md): The finding's details page displays in-depth information about the finding, including:
- [View findings in Semgrep AppSec Platform](https://docs.semgrep.dev/semgrep-secrets/findings.md)
- [Generic secrets AI](https://docs.semgrep.dev/semgrep-secrets/generic-secrets.md)
- [Scan for secrets](https://docs.semgrep.dev/semgrep-secrets/getting-started.md): Semgrep Secrets allows you to detect and triage leaked secrets and credentials and save time by prioritizing which secrets to rotate based on whether they're active and in use.
- [Semgrep Secrets glossary](https://docs.semgrep.dev/semgrep-secrets/glossary.md): The terms and definitions provided here are specific to Semgrep Secrets.
- [Scan your Git history (beta)](https://docs.semgrep.dev/semgrep-secrets/historical-scanning.md)
- [Manage Semgrep Secrets rules using the policies page](https://docs.semgrep.dev/semgrep-secrets/policies.md)
- [Semgrep Secrets rule structure and sample](https://docs.semgrep.dev/semgrep-secrets/rules.md): This article walks you through writing, publishing, and using Semgrep Secrets rules. It also demonstrates what a sample Semgrep Secrets rule looks like, with subsequent sections describing…
- [Semgrep Secrets rule structure and sample](https://docs.semgrep.dev/semgrep-secrets/rules-1.md): This article walks you through writing, publishing, and using Semgrep Secrets rules. It also demonstrates what a sample Semgrep Secrets rule looks like, with subsequent sections describing…
- [Triage and remediate findings](https://docs.semgrep.dev/semgrep-secrets/triage-remediation.md): This article shows you how to manage and triage the findings identified by Semgrep Secrets using Semgrep AppSec Platform.
- [Write custom validators](https://docs.semgrep.dev/semgrep-secrets/validators.md)
- [Write custom validators](https://docs.semgrep.dev/semgrep-secrets/validators-1.md)
- [View advisories and search for related findings](https://docs.semgrep.dev/semgrep-supply-chain/advisories.md)
- [View Dependency paths (beta)](https://docs.semgrep.dev/semgrep-supply-chain/dependency-paths.md)
- [View and search for dependencies](https://docs.semgrep.dev/semgrep-supply-chain/dependency-search.md)
- [View finding details](https://docs.semgrep.dev/semgrep-supply-chain/finding-details.md): Learn how to view details about a specific Supply Chain finding in Semgrep AppSec Platform.
- [View findings in Semgrep AppSec Platform](https://docs.semgrep.dev/semgrep-supply-chain/findings.md)
- [Semgrep Supply Chain glossary](https://docs.semgrep.dev/semgrep-supply-chain/glossary.md): The terms and definitions provided here are specific to Semgrep Supply Chain.
- [Ignore manifest files, lockfiles, and dependencies](https://docs.semgrep.dev/semgrep-supply-chain/ignoring-dependencies.md)
- [Ignore manifest files, lockfiles, and dependencies](https://docs.semgrep.dev/semgrep-supply-chain/ignoring-deps.md)
- [License compliance](https://docs.semgrep.dev/semgrep-supply-chain/license-compliance.md)
- [Detect and remove malicious dependencies](https://docs.semgrep.dev/semgrep-supply-chain/malicious-dependencies.md)
- [Overview](https://docs.semgrep.dev/semgrep-supply-chain/overview.md): Semgrep Supply Chain is a software composition analysis (SCA) tool that detects security vulnerabilities in your codebase introduced by open source dependencies.
- [Manage policies](https://docs.semgrep.dev/semgrep-supply-chain/policies.md)
- [Supply Chain requirements and feature support](https://docs.semgrep.dev/semgrep-supply-chain/requirements-and-feature-support.md): This document discusses the requirements to use Supply Chain and the features supported by Semgrep Supply Chain.
- [Generate a software bill of materials](https://docs.semgrep.dev/semgrep-supply-chain/sbom.md)
- [Set up and configure Supply Chain scans](https://docs.semgrep.dev/semgrep-supply-chain/set-up-and-configure.md): Learn about the setup needed to scan your project with Semgrep Supply Chain and its configuration and customization options.
- [Set up Semgrep Supply Chain for your infrastructure](https://docs.semgrep.dev/semgrep-supply-chain/setup-infrastructure.md)
- [Set up Semgrep Supply Chain with Apache Maven (Java)](https://docs.semgrep.dev/semgrep-supply-chain/setup-maven.md)
- [Triage and fix Supply Chain findings](https://docs.semgrep.dev/semgrep-supply-chain/triage-and-fix/overview.md)
- [Upgrade guidance and Autofix (beta)](https://docs.semgrep.dev/semgrep-supply-chain/triage-and-fix/upgrade-guidance-and-autofix.md)
- [Semgrepignore v2 reference](https://docs.semgrep.dev/semgrepignore-v2-reference.md)
- [Support](https://docs.semgrep.dev/support.md): This document provides various methods for all users of Semgrep to get help.
- [Supported languages](https://docs.semgrep.dev/supported-languages.md)
- [Semgrep trophy case](https://docs.semgrep.dev/trophy-case.md): This is a list of vulnerabilities found and security fixes made with Semgrep.
- [Troubleshooting rules](https://docs.semgrep.dev/troubleshooting/rules.md)
- [Troubleshooting the CLI](https://docs.semgrep.dev/troubleshooting/semgrep.md)
- [Troubleshooting CI scans](https://docs.semgrep.dev/troubleshooting/semgrep-app.md)
- [Update Semgrep](https://docs.semgrep.dev/update.md): Stay up-to-date by running the latest version of Semgrep automatically in CI or your local CLI.
- [How Semgrep calculates contributor count](https://docs.semgrep.dev/usage-and-billing/contributor-count-explained.md)
- [ Usage and billing](https://docs.semgrep.dev/usage-and-billing/overview.md): This document provides information on how Semgrep calculates usage for billing purposes and is intended for users with paid Semgrep Code, Supply Chain, or Secrets licenses.
- [Upgrade your Semgrep subscription plan](https://docs.semgrep.dev/usage-and-billing/plan-changes-and-payments.md): To upgrade your Semgrep subscription from the **Free** plan to the **Team** plan using a credit card as the payment method:
- [Additional usage and reconciliation of licenses](https://docs.semgrep.dev/usage-and-billing/reconciliation.md): If your organization uses more licenses than purchased for the contract period, you will be charged for each extra license starting the month after the overage occurs.
- [Constant propagation](https://docs.semgrep.dev/writing-rules/data-flow/constant-propagation.md)
- [Dataflow analysis engine overview](https://docs.semgrep.dev/writing-rules/data-flow/data-flow-overview.md): Semgrep provides an intraprocedural data-flow analysis engine that opens various Semgrep capabilities. Semgrep provides the following data-flow analyses:
- [Dataflow status](https://docs.semgrep.dev/writing-rules/data-flow/status.md)
- [Advanced taint analysis techniques](https://docs.semgrep.dev/writing-rules/data-flow/taint-mode/advanced.md)
- [Taint analysis overview](https://docs.semgrep.dev/writing-rules/data-flow/taint-mode/overview.md)
- [Aliengrep](https://docs.semgrep.dev/writing-rules/experiments/aliengrep.md)
- [Deprecated experiments](https://docs.semgrep.dev/writing-rules/experiments/deprecated-experiments.md)
- [Display propagated value of metavariables](https://docs.semgrep.dev/writing-rules/experiments/display-propagated-metavariable.md)
- [Introduction to Semgrep experiments](https://docs.semgrep.dev/writing-rules/experiments/introduction.md)
- [Join mode overview](https://docs.semgrep.dev/writing-rules/experiments/join-mode/overview.md): Join mode runs several Semgrep rules at once and only returns results if certain conditions on the results are met. Join mode is an experimental mode that lets you cross file boundaries, al…
- [Recursive joins](https://docs.semgrep.dev/writing-rules/experiments/join-mode/recursive-joins.md)
- [Match captured metavariables with specific types](https://docs.semgrep.dev/writing-rules/experiments/metavariable-type.md)
- [Include multiple focus metavariables using set union semantics](https://docs.semgrep.dev/writing-rules/experiments/multiple-focus-metavariables.md): Semgrep matches all pieces of code captured by focus metavariables when you specify them in a rule. Specify the metavariables you want to focus on in a YAML list format.
- [Pattern syntax (experimental)](https://docs.semgrep.dev/writing-rules/experiments/pattern-syntax.md)
- [r2c-internal-project-depends-on](https://docs.semgrep.dev/writing-rules/experiments/r2c-internal-project-depends-on.md)
- [Symbolic propagation](https://docs.semgrep.dev/writing-rules/experiments/symbolic-propagation.md): Symbolic propagation allows Semgrep to perform matching modulo variable assignments. Consider the following Python code:
- [Generic pattern matching](https://docs.semgrep.dev/writing-rules/generic-pattern-matching.md)
- [Static analysis and rule-writing glossary](https://docs.semgrep.dev/writing-rules/glossary.md): The definitions provided here are specific to Semgrep.
- [Metavariable analysis](https://docs.semgrep.dev/writing-rules/metavariable-analysis.md)
- [Write rules](https://docs.semgrep.dev/writing-rules/overview.md): Semgrep uses rules, which encapsulate pattern matching logic and data flow analysis, to scan your code for security issues, style violations, bugs, and more. In addition to rules available…
- [Write rules](https://docs.semgrep.dev/writing-rules/overview-1.md): Semgrep uses rules, which encapsulate pattern matching logic and data flow analysis, to scan your code for security issues, style violations, bugs, and more. In addition to rules available…
- [Rule pattern syntax examples](https://docs.semgrep.dev/writing-rules/pattern-examples.md)
- [Rule pattern syntax](https://docs.semgrep.dev/writing-rules/pattern-syntax.md)
- [Private rules](https://docs.semgrep.dev/writing-rules/private-rules.md)
- [Rule-defined fix](https://docs.semgrep.dev/writing-rules/rule-defined-fix.md): Rule-defined fix is a Semgrep feature that lets you add suggested fixes to rules.
- [Rule structure syntax examples](https://docs.semgrep.dev/writing-rules/rule-ideas.md): Not sure what to write a rule for? Below are some common questions, ideas, and topics to spur your imagination. Happy hacking! 💡
- [Rule structure syntax](https://docs.semgrep.dev/writing-rules/rule-syntax.md)
- [Test rules](https://docs.semgrep.dev/writing-rules/testing-rules.md): Semgrep provides a testing mechanism for your rules. You can write code and provide annotations to let Semgrep know where you are or aren't expecting findings. Semgrep provides the followin…

## OpenAPI Specs

- [public_v2.openapi](https://docs.semgrep.dev/public_v2.openapi.yaml)
- [public_v1.openapi](https://docs.semgrep.dev/public_v1.openapi.yaml)

## Optional

- [Registry](https://semgrep.dev/explore/)
- [Playground](https://semgrep.dev/playground/new)
- [Academy](https://academy.semgrep.dev)
- [Registry](https://semgrep.dev/explore)
- [Playground](https://semgrep.dev/playground/new)
- [Semgrep Academy](https://academy.semgrep.dev/)
- [GitHub](https://github.com/semgrep/semgrep-docs)