> ## Documentation Index
> Fetch the complete documentation index at: https://docs.semgrep.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# September 2023

> September 30, 2023 · 4 min read

> [!NOTE]
>
> **INFO**
>
> * Moving forward, these release notes cover the following products:
>   * Semgrep Cloud Platform
>   * Semgrep Code
>   * Semgrep Supply Chain
>   * Semgrep Assistant (beta)
>   * Semgrep documentation and knowledge base
> * Refer to **Semgrep OSS** release notes in [ Semgrep GitHub > Releases](https://github.com/semgrep/semgrep/releases/) as the source of truth for OSS releases.

## Private beta sign-ups

* **Semgrep Secrets** is a code scanner that detects exposed API keys, passwords, and other credentials. Sign up for the private beta by filling out the [ Semgrep Secrets Beta](https://get.semgrep.dev/secrets-beta-request.html) form.
* **Semgrep Supply Chain SBOM (software bill of materials)** enables you to export a list of dependencies in the CycloneDX 1.4 XML/JSON format. Sign up for the private beta by filling out the [ SSC SBOM Export](https://get.semgrep.dev/SBOM-Export-private-beta.htm) form.

## 🔧 Semgrep OSS Engine

* The following versions of Semgrep OSS Engine were released in September 2023:

> **[1.38.0](https://github.com/semgrep/semgrep/releases/tag/v1.38.0)**

> **[1.39.0](https://github.com/semgrep/semgrep/releases/tag/v1.39.0)**

> **[1.40.0](https://github.com/semgrep/semgrep/releases/tag/v1.40.0)**

> **[1.41.0](https://github.com/semgrep/semgrep/releases/tag/v1.41.0)**

> **[1.42.0](https://github.com/semgrep/semgrep/releases/tag/v1.42.0)**

## 🌐 Semgrep Cloud Platform

### Added

* UX: Added a new **onboarding** flow. This onboarding flow streamlines the following steps to ensure that users are able to quickly set up Semgrep scans:&#x20;
  * **Deployment creation**. The Semgrep team has made improvements to Semgrep account creation and connecting your source code manager, such as GitHub or GitLab.
  * **Onboarding checklist.** This helps you troubleshoot and resolve any issues early on in your journey.
  * **Tour of features**. Make the most of your Semgrep experience by learning what features are available to you.
* Logging into Semgrep Cloud Platform through the CLI associates your CLI user ID to your Semgrep Cloud Platform account. See the [ Anonymous User ID](https://github.com/semgrep/semgrep/blob/develop/metrics.md#anonymous-user-id) section for more details.

### Changed

* **SCM configuration:** Improved the **Delete message** when deleting SCMs, so that you are aware of the implications of removing an SCM. Many major Semgrep features rely on a connection with your source code manager, so take care when deleting SCMs.
* **GitHub:** Semgrep no longer automatically associates a new user's Semgrep organization with their personal GitHub account. New users can still connect their Semgrep organization with their personal account.

### Fixed

* **GitLab:** Fixed the GitLab CI sample configuration file to help users onboard GitLab repositories more clearly. In particular, the configuration file now includes the `GITLAB_TOKEN` environment variable, which was previously only in the docs.
* Fixed a timeout issue when syncing large numbers (15,000+) of GitHub repositories in Semgrep Cloud Platform.
* Fixed performance issues when synchronizing Semgrep Cloud Platform Projects with their corresponding GitHub repositories&#x20;

## 💻 Semgrep Code

### Changed

* **Findings page:** By default, the findings page now displays findings from **default (trunk or main) branches**. You can customize this filter by selecting a value from the **Branch** drop-down menu.

### Fixed

* Various UX/UI bugfixes in the Findings page.

## ⛓️ Semgrep Supply Chain

### Added

* **Filtering:** Allow users to select more than one branch at a time.

## 🤖 Semgrep Assistant (beta)

### Added

* **GitLab:** Semgrep Assistant now supports GitLab cloud hosted and self-managed repositories.
* **Findings page**: Semgrep Assistant verdicts now appear in the Findings page if Assistant recommends that the finding should be **Ignored**.&#x20;

  ![Sample finding entry with Semgrep Assistant verdict](https://mintcdn.com/semgrep-ee9d73d8/dAOv4YoaZfaIbJZH/images/sept-2023-assistant-findings-2dd52d74f6c35f8a928d898df97532c5.png?fit=max\&auto=format\&n=dAOv4YoaZfaIbJZH\&q=85\&s=35d56f0cb682d1c8a8f2fa910e071f35)
* **Finding Details page:** For findings with autofixes, the finding's detail page includes a link to the PR comment with the autofix since the PR comment allows for directly committing the autofix.&#x20;

### Fixed

* **GitLab:** Fixed a bug in which comments were not appearing on GitLab.com cloud-hosted repositories.

## 📝 Documentation and knowledge base

### Added

* New knowledge base articles:
  * [ Failed to run a Git command during pull request or merge request scans](https://docs.semgrep.dev/kb/semgrep-ci/git-command-errors.md)
  * [ How to exclude certain file types for a particular rule](https://docs.semgrep.dev/kb/rules/exclude_rule_for_certain_filetypes.md)
  * [ Why isn’t Semgrep reporting all my tainted data flows?](https://docs.semgrep.dev/kb/semgrep-code/finding_all_taints.md)
  * [ How to scan multiple or nested lock files](https://docs.semgrep.dev/kb/semgrep-supply-chain/scanning_multiple_lockfiles.md)
* [ Semgrep Assistant](https://docs.semgrep.dev/semgrep-multimodal/getting-started#enable-assistant): Added a guide to setting up Assistant on GitLab MRs.
* [ Supported languages](https://docs.semgrep.dev/supported-languages#language-maturity-levels): Added a section on Semgrep Pro Engine language maturity factors. These are the criteria that determine if a language is generally available (GA) or beta.

### Changed

* Integrated **Ask** (GPT-powered chat) and **Search** functions into one modal.
* Clarifications on various Semgrep Supply Chain behaviors.
* [ Sample CI configurations](https://docs.semgrep.dev/semgrep-ci/sample-ci-configs.md): Updated various CI configurations for standalone SAST scans.
* A clarification has been added on [Semgrep exit codes in conjunction with the `error` flag](https://docs.semgrep.dev/cli-reference#exit-codes). Thank you to [Bernardo de Araujo](https://github.com/bernardoamc) for this contribution.

### Removed

* Semgrep CLI autocomplete documentation has been removed.
