Skip to main content

Troubleshoot ValueError: Invalid header value error

When scanning with Semgrep, you may run into the following error:

Invalid header value b'Bearer *******************************************************'
Traceback (most recent call last):
File "/usr/local/lib/python3.11/site-packages/semgrep/commands/", line 35, in wrapper
func(*args, **kwargs)
File "/usr/local/lib/python3.11/site-packages/semgrep/commands/", line 242, in ci
deployment_name = auth.get_deployment_from_token(token)
File "/usr/local/lib/python3.11/site-packages/semgrep/app/", line 17, in get_deployment_from_token
r = state.app_session.get(
File "/usr/local/lib/python3.11/site-packages/requests/", line 602, in get
return self.request("GET", url, **kwargs)
File "/usr/local/lib/python3.11/site-packages/semgrep/app/", line 188, in request
response = super().request(*args, **kwargs)
File "/usr/local/lib/python3.11/site-packages/requests/", line 589, in request
resp = self.send(prep, **send_kwargs)
File "/usr/local/lib/python3.11/site-packages/requests/", line 703, in send
r = adapter.send(request, **kwargs)
File "/usr/local/lib/python3.11/site-packages/requests/", line 486, in send
resp = conn.urlopen(
File "/usr/local/lib/python3.11/site-packages/urllib3/", line 714, in urlopen
httplib_response = self._make_request(
File "/usr/local/lib/python3.11/site-packages/urllib3/", line 415, in _make_request
conn.request(method, url, **httplib_request_kw)
File "/usr/local/lib/python3.11/site-packages/urllib3/", line 244, in request
super(HTTPConnection, self).request(method, url, body=body, headers=headers)
File "/usr/local/lib/python3.11/http/", line 1283, in request
self._send_request(method, url, body, headers, encode_chunked)
File "/usr/local/lib/python3.11/http/", line 1324, in _send_request
self.putheader(hdr, value)
File "/usr/local/lib/python3.11/site-packages/urllib3/", line 224, in putheader
_HTTPConnection.putheader(self, header, *values)
File "/usr/local/lib/python3.11/http/", line 1261, in putheader
raise ValueError('Invalid header value %r' % (values[i],))
ValueError: Invalid header value b'Bearer *******************************************************'

This error indicates that there is a problem in the pasted SEMGREP_APP_TOKEN value, most often an extra newline (\n).

Fix a secret on GitHub

To fix on GitHub:

  1. At either the organization or repository level, go to Settings > Secrets and variables Secrets and variables section in Settings
  2. Update the value of the SEMGREP_APP_TOKEN to ensure it does not have an extraneous newline (\n) and is not malformed Updating GitHub Secret

Fix a secret on GitLab

To fix on GitLab:

  1. Go to your repository's CI/CD settings
  2. Update the SEMGREP_APP_TOKEN value to ensure it does not have an extraneous newline (\n) and is not malformed Updating GitLab Variable

Not finding what you need in this doc? Ask questions in our Community Slack group, or see Support for other ways to get help.