You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
Semgrep incorrectly states that it only scanned git-tracked files.
To Reproduce
Create a new directory.
Copy some project where semgrep will find something into the new directory but make sure not to copy the .git directory (if any).
Run semgrep scan --json -o o while in the newly created directory.
Semgrep will print something like Scanning 35809 files (only git-tracked) with: [...] even though file o will contain findings. Since semgrep was not run in a git directory, there are no git-tracked files in it, meaning that "Scanning 35809 files (only git-tracked)" is a false statement.
Expected behavior
Semgrep should not print "only git-tracked".
What is the priority of the bug to you?
P0: blocking your adoption of Semgrep or workflow
P1: important to fix or quite annoying
P2: regular bug that should get fixed
Environment
Official build (1.60.1) installed via python3 -m pipx install semgrep running on Manjaro.
Use case
Without this bug, I wouldn't have spent a long time trying to figure out how to make semgrep ignore git. In fact, I'm still not sure whether semgrep even allows the user to ignore git or whether you need to copy your project to a different directory without .git and .gitignore if you want to do so.
The text was updated successfully, but these errors were encountered:
Describe the bug
Semgrep incorrectly states that it only scanned git-tracked files.
To Reproduce
.git
directory (if any).semgrep scan --json -o o
while in the newly created directory.Scanning 35809 files (only git-tracked) with: [...]
even though fileo
will contain findings. Since semgrep was not run in a git directory, there are no git-tracked files in it, meaning that "Scanning 35809 files (only git-tracked)" is a false statement.Expected behavior
Semgrep should not print "only git-tracked".
What is the priority of the bug to you?
Environment
Official build (1.60.1) installed via
python3 -m pipx install semgrep
running on Manjaro.Use case
Without this bug, I wouldn't have spent a long time trying to figure out how to make semgrep ignore git. In fact, I'm still not sure whether semgrep even allows the user to ignore git or whether you need to copy your project to a different directory without
.git
and.gitignore
if you want to do so.The text was updated successfully, but these errors were encountered: