# Semgrep: Major incident: Scan failures with exit code 7 due to invalid rule

**Summary:** Semgrep reported a major incident causing widespread exit code 7 scan failures in Managed Scans and Scans and CI/CD from 2026-06-25 21:32 UTC to 2026-06-25 22:27 UTC (55 min). A bad AI skills rules release caused the failures; Semgrep removed "skills.behavioral.skill-destructive-commands.skill-destructive-commands" and confirmed scans were running normally. _(machine-written, sol)_
- Kind: Major incident · Label: outage (model (Jev))
- Changed: 2026-06-25 21:32 UTC · Detected: 2026-10-17 18:22 UTC
- [Source: https://stspg.io/vkkncvyrv3l8](https://stspg.io/vkkncvyrv3l8)
- [Company: Semgrep](https://rewindex.com/company/semgrep.md)
- Versions: before (none: first archived) → after incident\_version:316/p8222qljjxf1@30192983ff7e
- Change 1 of 1 for this incident

## What changed

**1. Added: Title**

```diff
+ Scan failures with exit code 7 due to invalid rule
```

**2. Added: Impact**

```diff
+ major
```

**3. Added: Status**

```diff
+ resolved
```

**4. Added: Start time**

```diff
+ 2026-06-25 21:32 UTC
```

**5. Added: Resolved time**

```diff
+ 2026-06-25 22:27 UTC
```

**6. Added: Affected components**

```diff
+ Managed Scans, Scans and CI/CD, semgrep.dev - Managed Scans, semgrep.dev - Scans and CI/CD
```

**7. Added: Update** (identified) · 2026-06-25 21:32 UTC

```diff
+ We have observed widespread scan failures relating to a bad release of AI skills rules. We are working to fix the issue.  To prevent the issue in the meantime, you can disable the "skills.behavioral.skill-destructive-commands.skill-destructive-commands" rule in your Semgrep policies.
```

**8. Added: Update** (monitoring) · 2026-06-25 22:14 UTC

```diff
+ We have removed the problem rule ("skills.behavioral.skill-destructive-commands.skill-destructive-commands") and we are seeing scan behavior recover. We are continuing to monitor for full recovery.
```

**9. Added: Update** (resolved) · 2026-06-25 22:27 UTC

```diff
+ This issue has been resolved. Scans are now running normally.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-06-25 21:32 UTC | Major incident: Scan failures with exit code 7 due to invalid rule (this change) | outage |

All Semgrep changes: [timeline](https://rewindex.com/company/semgrep/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._


---
Canonical: https://rewindex.com/change/i2f8b9a4919a0ab · Markdown: https://rewindex.com/change/i2f8b9a4919a0ab.md · JSON: https://rewindex.com/api/v1/changes/i2f8b9a4919a0ab · Generated 2026-10-18T02:31:38.799Z