Skip to content

v0.1.1 — no more hang on blocked semgrep registry

Choose a tag to compare

View all tags
@give-jd give-jd released this 10 Jul 09:41
v0.1.1
f4de3b6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Bug fix release.

In egress-restricted environments (Cowork sandbox, corporate proxies with allowlists) semgrep retried the blocked registry indefinitely and scan.sh hung forever.

  • Reachability pre-check on semgrep.dev for registry (p/*) configs — graceful skip with guidance when blocked
  • New env vars: DSC_SEMGREP_CONFIG (local ruleset, fully offline semgrep) and DSC_SEMGREP_TIMEOUT (default 900s)
  • --disable-version-check

Found during a Claude Cowork sandbox compatibility test. Thanks to the graceful degradation design, the remaining scanners keep running and assessment_confidence reflects the reduced coverage.

Assets 2
Loading