Semgrep incident

Dependencies are not processing

Minor Resolved View vendor source →

Semgrep experienced a minor incident on October 23, 2025 affecting Dashboard, lasting 10h 14m. The incident has been resolved; the full update timeline is below.

Started
Oct 23, 2025, 03:45 PM UTC
Resolved
Oct 24, 2025, 02:00 AM UTC
Duration
10h 14m
Detected by Pingoru
Oct 23, 2025, 03:45 PM UTC

Affected components

Dashboard

Update timeline

  1. identified Oct 23, 2025, 03:45 PM UTC

    Dependencies found in Supply Chain scans are currently not being processed and recorded. We've identified the cause and are working on a fix. Scan completion is not affected. Dependencies may be temporarily missing from the Semgrep platform; once the incident is resolved and the project is re-scanned, they will be restored.

  2. identified Oct 23, 2025, 04:55 PM UTC

    Dependency processing has resumed for scans running now. We're continuing to work on a longer-term mitigation.

  3. identified Oct 24, 2025, 01:33 AM UTC

    We've temporarily disabled dependency processing in order to roll out a longer-term fix. New dependencies will not appear in Semgrep during this time. We don't anticipate any impact to scans, and we'll update this page when normal processing resumes.

  4. monitoring Oct 24, 2025, 01:46 AM UTC

    Dependency processing has resumed and the underlying issue has been resolved.

  5. resolved Oct 24, 2025, 02:00 AM UTC

    This incident has been resolved.