Why are my projects showing a status of "Not yet started" after I enable Managed Scans?
When onboarding a large number of projects to Semgrep Managed Scans (SMS), users may notice that many of them show a Not yet started status, even after enabling Managed Scans. This is because Semgrep doesn't trigger scans for all projects at once. Instead, Semgrep scans the repositories over time to manage system resources effectively.
If you need immediate results for specific projects, you can manually trigger a scan:
- In Semgrep AppSec Platform, navigate to Projects.
- Find the project you want to scan, then click the project's window icon under the Details column.
- On the project's Details page, click Run a new scan.
After the initial scan, Semgrep automatically scans each repository every week.
If projects remain in Not yet started status for longer than a week, or if manually triggered scans don't start, this could indicate an issue with the:
- Repository permissions
- SCM access token
- Network connectivity
In such cases, contact Semgrep Support for assistance.
Not finding what you need in this doc? Ask questions in our Community Slack group, or see Support for other ways to get help.