Supply chain dependency and license processing degraded

Incident Report for Semgrep

Resolved

Between approximately 16:00 UTC and 22:00 UTC, Semgrep's dependency and license processing experienced failures due to an issue with a release. Supply chain findings were not affected during this time.

New dependencies added to scanned projects during this time would not have appeared on the Dependencies page, and license policy violations were not processed and did not appear in pull requests.

As of 22:15 UTC, scans are functioning normally. For affected pull request scans during this window, please close and re-open the pull request or push a new commit to re-trigger a new scan.

Posted Jan 16, 2025 - 16:30 UTC