Semgrep Product Release Updates and Upgrade Notes

Semgrep

Sep 23, 2026

Semgrep September 2026: Give Release Owners Visible AI-Agent Scan Status

Semgrep’s September 2026 updates make AI-assisted development scanning more visible to release owners by showing Guardian setup, scan results, sign-in requirements, and server errors directly in supported AI coding agents. Teams can export Agentic Workflows issues through CSV and the public API, while fixes improve branch accuracy, repository attribution, and branch-check reliability for private connectivity. These changes help enterprises produce more dependable security evidence for AI-assisted delivery.

AppSec
DevSecOps

Semgrep

Aug 12, 2026

Semgrep August 2026: Govern policy migration before enforcement changes

Semgrep’s August 2026 update introduces structured, searchable Agentic Workflows logs and improves source-file links when SCM connectivity fails. Organizations using current Policies should plan for unified policies migration beginning August 24, 2026; the existing Policies experience sunsets November 1, 2026. The release also adds breaking_change and full_scan vocabulary to the public beta policies API and updates project finding counts to include Reviewing and To fix statuses.

AppSec
DevSecOps

Semgrep

Aug 5, 2026

Semgrep July 2026: Reviewable AI Detection and Tighter Supply Chain Controls

Semgrep’s July 2026 update adds Agentic Workflows in public beta, combining program analysis, deterministic tools, and constrained AI reasoning to generate reviewable security findings. Supply Chain customers can block dependencies only when all associated licenses are prohibited and receive default incident-policy support with Slack notifications based on recent SBOM exposure. The update also strengthens operational governance through policy-tag warnings, clearer webhook failures, and fixes to manual triage and integration behavior.

AppSec
DevSecOps

Semgrep

Jul 10, 2026

Semgrep June 2026: Unified Policies Beta, Autofix Pull Requests and CycloneDX 1.7 SBOM Export

Semgrep's June 2026 release notes (published July 8, 2026) cover the Semgrep AppSec Platform, Semgrep Code, Supply Chain, Secrets and AI features. Unified Policies entered beta as one place to choose rules and define what happens after a finding. Autofix can open pull and merge requests on GitHub, GitLab, Bitbucket and Azure DevOps. Supply Chain adds CycloneDX 1.5 to 1.7 SBOM export and a default malicious-dependency blocking policy for new organizations, and scans skip binary files by default.

AppSec
DevSecOps

Semgrep

Jun 6, 2026

From Release Notes To Risk Management: How Enterprises Can Operationalize Semgrep Updates

Learn how Semgrep's documentation index, release notes structure and update cadence support DevSecOps governance, compliance, audit readiness and SDLC risk management.

AppSec
DevSecOps

Semgrep

May 14, 2026

Semgrep vApril 2026 Platform Updates For Enterprise AppSec: Stronger Governance, AI Visibility, And Supply Chain Control

Learn how Semgrep strengthens enterprise application security with SSO governance, managed scans, AI findings, and software supply chain controls.

AppSec
Semgrep
AI

Semgrep

Apr 14, 2026

Semgrep AppSec Platform Update (April 2026): AI Detection, Autofix, And Enterprise Governance

Semgrep’s latest update brings AI-powered detection, Autofix, and enhanced policy control, helping enterprises reduce risk, improve remediation speed, and scale AppSec across code and supply chains.

AppSec
AI

Semgrep

Mar 9, 2026

Semgrep February 2026 Update: Improving Enterprise Application Security Operations

The Semgrep February 2026 release improves enterprise application security scanning with better SAST accuracy, supply chain visibility, and governance controls. Learn how Merito helps deploy Semgrep at scale.

Semgrep
AppSec
SAST

Semgrep

Feb 7, 2026

Semgrep January 2026 Release: Strengthening AppSec Governance And Supply Chain Risk

Semgrep January 2026 strengthens OAuth governance, reachability analysis, and scan performance, improving enterprise DevSecOps control, software supply chain security, and audit ready risk reporting at scale.

Semgrep
DevSecOps
SDLC

Semgrep release updates