# Semgrep: Supply chain dependency and license processing degraded

- Impact (vendor’s label): major
- Status: resolved
- Started: 2025-01-16 16:30 UTC · Resolved: 2025-01-16 16:30 UTC · Duration: 0 min
- Updates: 1
- [Vendor status page: https://status.semgrep.dev/incidents/zldjy7s20kn7](https://status.semgrep.dev/incidents/zldjy7s20kn7)
- [Company: Semgrep](https://rewindex.com/company/semgrep.md)

## Timeline of updates

- **resolved** 2025-01-16 16:30 UTC: Between approximately 16:00 UTC and 22:00 UTC, Semgrep's dependency and license processing experienced failures due to an issue with a release. Supply chain findings were not affected during this time. New dependencies added to scanned projects during this time would not have appeared on the Dependencies page, and license policy violations were not processed and did not appear in pull requests. As of 22:15 UTC, scans are functioning normally. For affected pull request scans during this window, please close and re-open the pull request or push a new commit to re-trigger a new scan.

_From the vendor’s published history: only the final update text is available for incidents before Rewindex began polling this page._


---
Canonical: https://rewindex.com/company/semgrep/incidents/zldjy7s20kn7 · Markdown: https://rewindex.com/company/semgrep/incidents/zldjy7s20kn7.md · JSON: https://rewindex.com/api/v1/companies/semgrep/incidents/zldjy7s20kn7 · Generated 2026-10-18T11:32:16.807Z