Search results

--sarif-output ignores nosemgrep suppression in terminal output but honors it in the SARIF file

Status: Open.

#11715 In semgrep/semgrep;

· gugacyber opened on May 20, 2026

[SCA] yarn.lock parser fails on optional dependencies with patch protocol

Status: Open.

#11710 In semgrep/semgrep;

· cursor opened on May 18, 2026

Dockerfile CRLF multi-line run command partial parsing syntax error

lang:dockerfile

parsingRequires a fix in a parser, typically a tree-sitter or menhir grammar.Requires a fix in a parser, typically a tree-sitter or menhir grammar.

Status: Open.

Bug

#11697 In semgrep/semgrep;

· shelbyneal opened on May 12, 2026

misuse of metavariable in Java crypto rules

lang:java

semgrep-rules

Status: Open.

#11662 In semgrep/semgrep;

· 9iang22 opened on Apr 25, 2026

YAML anchors/aliases in Semgrep rules are (partially?) broken

bugSomething isn't workingSomething isn't working

parsingRequires a fix in a parser, typically a tree-sitter or menhir grammar.Requires a fix in a parser, typically a tree-sitter or menhir grammar.

Status: Open.

#11654 In semgrep/semgrep;

· mschwager opened on Apr 22, 2026

rules do not catch elementary issue with Python

Status: Open.

#11651 In semgrep/semgrep;

· a-vassily opened on Apr 20, 2026

semgrep_scan MCP tool fails with Cannot create auto config when metrics are off when config=None and SEMGREP_METRICS=off

bugSomething isn't workingSomething isn't working

feature:mcpIssues related Semgrep's Model Context Protocol (MCP) serverIssues related Semgrep's Model Context Protocol (MCP) server

Status: Open.

#11649 In semgrep/semgrep;

· MekayelAnik opened on Apr 19, 2026

deregister_tools() at server.py:1382 crashes with KeyError when a tool is env-gated-skipped at registration

bugSomething isn't workingSomething isn't working

feature:mcpIssues related Semgrep's Model Context Protocol (MCP) serverIssues related Semgrep's Model Context Protocol (MCP) server

Status: Open.

#11646 In semgrep/semgrep;

· MekayelAnik opened on Apr 18, 2026

get_abstract_syntax_tree MCP tool broken on 1.159.0: uses legacy --dump-ast CLI form

bugSomething isn't workingSomething isn't working

feature:mcpIssues related Semgrep's Model Context Protocol (MCP) serverIssues related Semgrep's Model Context Protocol (MCP) server

Status: Open.

#11645 In semgrep/semgrep;

· MekayelAnik opened on Apr 18, 2026

SAST scan fails - Error: Process completed with exit code 255.

Status: Open.

#11628 In semgrep/semgrep;

· joysarkar11 opened on Apr 13, 2026

[C/CPP] conflict type in typed metavariable with type cast in c/cpp

Status: Open.

#11621 In semgrep/semgrep;

· 9iang22 opened on Apr 10, 2026

[C/CPP] matching not span across goto label section

enhancementNew feature or requestNew feature or request

Status: Open.

#11620 In semgrep/semgrep;

· 9iang22 opened on Apr 10, 2026