Skip to content

Commit 424cc31

Browse files
authored
add offboarding instructions for SMS (#1929)
1 parent 06bda71 commit 424cc31

File tree

6 files changed

+25
-1
lines changed

6 files changed

+25
-1
lines changed

docs/deployment/managed-scanning/azure.md

+6-1
Original file line numberDiff line numberDiff line change
@@ -11,12 +11,12 @@ tags:
1111
---
1212

1313
import ScanWithSms from "/src/components/procedure/_scan-with-sms.mdx"
14+
import TurnOffSms from "/src/components/procedure/_turn-off-sms-in-semgrep-appsec-platform.mdx"
1415

1516
# Add an Azure DevOps repository to Semgrep Managed Scans
1617

1718
Add Azure DevOps repositories to your Semgrep organization in bulk without adding or changing your existing CI workflows through **Managed Scans**.
1819

19-
2020
## Prerequisites and permissions
2121

2222
- Semgrep Managed Scanning requires repositories hosted by Azure DevOps Services. It doesn't support Azure DevOps Server.
@@ -99,6 +99,11 @@ The following steps revoke the code access you previously granted Semgrep for al
9999
2. Find the Azure DevOps entry on the list of **Source code managers** and click **Remove**.
100100
3. Click **Remove** to confirm.
101101

102+
## Turn off Managed Scans for specific repositories in Semgrep AppSec Platform
103+
104+
<TurnOffSms />
105+
106+
102107
## Troubleshooting: multiple projects
103108

104109
If you currently scan Azure DevOps repositories in your CI pipeline, you may see findings assigned to two separate projects once you enable Semgrep Managed Scanning. For example, findings from Managed Scanning go to the `semgrep/frontend/webpage` project, while findings from CI scans go to the `frontend/webpage` project. If this is the case, Semgrep AppSec Platform flags these findings with **Possible duplicate**. Please [contact support](/support) for addition assistance.

docs/deployment/managed-scanning/github.md

+9
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@ tags:
1111
---
1212

1313
import ScanWithSms from "/src/components/procedure/_scan-with-sms.mdx"
14+
import TurnOffSms from "/src/components/procedure/_turn-off-sms-in-semgrep-appsec-platform.mdx"
1415

1516
# Add a GitHub repository to Semgrep Managed Scans
1617

@@ -105,6 +106,14 @@ The following steps revoke the code access you previously granted Semgrep for al
105106
![GitHub settings page](/img/zcs-github-apps.png)
106107
1. Under **Repository access**, de-select the repositories you no longer want to grant Semgrep access to.
107108

109+
## Turn off Managed Scans for specific repositories in Semgrep AppSec Platform
110+
111+
<TurnOffSms />
112+
113+
:::warning
114+
If your [source code manager has Auto-scan enabled](https://semgrep.dev/orgs/-/settings/source-code) so that Semgrep automatically scans new repositories, turn off Managed Scans for specific repositories using Semgrep AppSec Platform. **Do not turn off Managed Scans by deleting the repository from Semgrep AppSec Platform.** If you have Auto-scan enabled and you delete your repository from the platform, Semgrep re-syncs the repository you deleted.
115+
:::
116+
108117
## Appendices
109118

110119
### Permissions and synchronicity

docs/deployment/managed-scanning/gitlab.md

+5
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@ tags:
1111
---
1212

1313
import ScanWithSms from "/src/components/procedure/_scan-with-sms.mdx"
14+
import TurnOffSms from "/src/components/procedure/_turn-off-sms-in-semgrep-appsec-platform.mdx"
1415

1516
# Add a GitLab repository to Semgrep Managed Scans
1617

@@ -106,6 +107,10 @@ The following steps revoke the code access you previously granted Semgrep for al
106107
1. On the entry of the SCM you want to remove, click **Remove app**.
107108
1. Click **Remove** to confirm.
108109

110+
## Turn off Managed Scans for specific repositories in Semgrep AppSec Platform
111+
112+
<TurnOffSms />
113+
109114
## Appendices
110115

111116
### Scan logs

docs/deployment/managed-scanning/overview.md

+1
Original file line numberDiff line numberDiff line change
@@ -60,5 +60,6 @@ By default, projects on Managed Scans are configured with:
6060

6161
Learn how to add a repository to Semgrep Managed Scans:
6262

63+
- [Azure DevOps](/deployment/managed-scanning/azure)
6364
- [GitHub](/deployment/managed-scanning/github)
6465
- [GitLab](/deployment/managed-scanning/gitlab)
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
1. Sign in to Semgrep AppSec Platform.
2+
2. Go to Projects and find the project you no longer want scanned with Semgrep Managed Scanning. Click the project's **Details** page > **Settings** tab.
3+
3. Toggle the switch for **Managed diff scans** to turn off scans of new pull and merge requests and **Managed full scans** to turn off full scans of the base branch.
4+
![Semgrep AppSec Platform toggles to turn off managed scans of repositories](/img/turn-off-sms.png#md-width)

static/img/turn-off-sms.png

43.5 KB
Loading

0 commit comments

Comments
 (0)