You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If you're getting findings in files that should have been
21
-
ignored according to your `.semgrepignore` file, check the
22
-
following:
23
-
24
-
1. If you're using Git, check that the `.semgrepignore` file is at the
25
-
root of the Git project or at least is within the project.
26
-
`.semgrepignore` files can be placed in any folder in the project
27
-
and follow the same specification as `.gitignore` files,
28
-
which they extend.
29
-
2. If you're not using Git, check that the `.semgrepignore` file
30
-
is in the folder passed on the `semgrep scan` command line.
31
-
For example, if the command is `semgrep scan foo/`, you must move
32
-
the `.semgrepignore` file from the current folder
33
-
to `foo/.semgrepignore`.
34
-
35
-
To ensure you're using Semgrepignore v2, pass the flag
36
-
`--semgrepignore-v2` to `semgrep scan` or to `semgrep
37
-
ci`. To use the legacy Semgrepignore v1 implementation, use
38
-
`--no-semgrepignore-v2`. These options are for troubleshooting the
39
-
migration from v1 to v2. These flags will be removed when v2 becomes
40
-
only implementation available.
10
+
If you don't have already a `.semgrepignore` file, refer to our [guide on how to exclude files from Semgrep scans](/docs/ignoring-files-folders-code).
11
+
12
+
If you already have a `.semgrepignore` file and are not seeing the results you expect, you may be seeing the effect of changes in Semgrep 1.117.0 and above. Starting with Semgrep 1.117.0, the Semgrepignore specification has changed slightly to better align with Git and Gitignore and to offer more flexibility. The new specification is referred to as [Semgrepignore v2](/docs/semgrepignore-v2-reference).
13
+
14
+
## Requirements for Semgrepignore v2
15
+
16
+
### If you're using Git
17
+
18
+
Place the the `.semgrepignore` file in root of the Git project (preferred) or in any folder in the project where you want to consistently ignore some files. `.semgrepignore files follow the same specification as `.gitignore` files, which they extend.
19
+
20
+
### If you're not using Git
21
+
22
+
Place the `.semgrepignore` file in the folder passed on the `semgrep scan` command line. For example, if the command is `semgrep scan foo/`, and the `.semgrepignore` file is in the current directory, move the `.semgrepignore` file from the current directory to `foo/.semgrepignore`.
23
+
24
+
## Troubleshooting Semgrepignore v2 issues
25
+
26
+
To ensure you're using Semgrepignore v2, pass the flag `--semgrepignore-v2` to `semgrep scan` or to `semgrep ci`. To use the legacy Semgrepignore v1 implementation, use `--no-semgrepignore-v2`. These options are for troubleshooting the migration from v1 to v2. These flags will be removed when v2 becomes the only implementation available.
0 commit comments