Dependency processing has resumed and the underlying issue has been resolved.
Posted Oct 24, 2025 - 01:46 UTC
Update
We've temporarily disabled dependency processing in order to roll out a longer-term fix. New dependencies will not appear in Semgrep during this time. We don't anticipate any impact to scans, and we'll update this page when normal processing resumes.
Posted Oct 24, 2025 - 01:33 UTC
Update
Dependency processing has resumed for scans running now. We're continuing to work on a longer-term mitigation.
Posted Oct 23, 2025 - 16:55 UTC
Identified
Dependencies found in Supply Chain scans are currently not being processed and recorded. We've identified the cause and are working on a fix. Scan completion is not affected. Dependencies may be temporarily missing from the Semgrep platform; once the incident is resolved and the project is re-scanned, they will be restored.