Semgrep Product Update

Get a Slack alert when a supply chain incident affects your dependencies

When a supply chain incident hits, finding out whether you’re affected has meant logging into Semgrep and searching manually. Incident notifications are now live for all Semgrep Supply Chain customers on Unified Policies: when Semgrep's Security Research team declares an incident, Supply Chain checks the account’s SBOM and sends a Slack alert to configured channels showing whether the organization is affected. Teams still using legacy policies need to migrate to Unified Policies to get the notifications.

profile image
Pablo Estrada