Skip to main content

Tag projects

Add tags for specific projects in the Semgrep AppSec Platform through the following methods:

  • Set tags through the Semgrep AppSec Platform > Projects > Project details page.
  • Set tags using the Semgrep AppSec Platform API.
  • Set tags in your repository's .semgrepconfig.yml file.
Setting tags
  • Keep in mind, when setting tags via the .semgrepconfig.yml file or Semgrep AppSec Platform API, that these actions supersede any tags previously set.
  • For example, if you set tags through the API and subsequently run a CI scan, then the previous tags set by the API will be overwritten by any tag definitions in the .semgrepconfig.yml file of the repository.
  • For this reason, the Semgrep team recommends exclusively choosing either the API or .semgrepconfig.yml file to manage and set tags. Do not use a mix of the two.

Set tags through Semgrep AppSec Platform and the API​

To manage tags through Semgrep AppSec Platform, follow these steps:

  1. Go to the Semgrep AppSec Platform Projects page.
  2. Click on the project's gear icon to enter project configuration page, and then add or remove tags.

Refer to Semgrep API documentation to use the API.

Set tags in .semgrepconfig.yml​

You can also add tags through a specific file added to your repository. To do so, follow the instructions below:

  1. Create .semgrepconfig.yml file in the root directory of your repository.
  2. Add tags to the .semgrepconfig.yml file. Example of tags added to .semgrepconfig.yml file: 
    tags:
        - favourite
        - awesomeproject
caution

Changes to tags made through the .semgrepconfig.yml file are also visible in the Semgrep AppSec Platform > Projects page, however, the inverse is not true (changes in Semgrep AppSec Platform > Projects page will be overwritten by .semgrepconfig.yml.)

Not finding what you need in this doc? Ask questions in our Community Slack group, or see Support for other ways to get help.