Semgrep Autumn ‘25 Release

SEMGREP CODE

BNGD (Private Beta)

"Big Number Go Down" surfaces priority findings by default and moves likely false positives and unreachable issues to a provisional ignored state. The backlog shrinks to a smaller, reviewable set without hiding new matches or changing rule logic. A funnel visualization shows total detected, non spam, and priority findings so reviewers can track the impact of tuning over time.

Items in provisional ignored are searchable and reversible so teams can restore them at any time during audits.

Interfile analysis for Scala (Public Beta)

Interfile analysis tracks data and control flow across files in Scala, including static and dynamic dispatch through traits and common web frameworks like Play. The engine builds cross file traces without compiling the project, which shortens feedback cycles in CI and during local testing. Findings include clear source to sink traces with intermediate calls so reviewers can validate the full path and reproduce issues quickly.

SEMGREP APPSEC PLATFORM

Semgrep Managed Scanning (GA)

Semgrep Managed Scanning automatically discovers, syncs, and scans repositories without CI configuration. It runs on a managed scheduler that handles retries and audit logs, keeping coverage stable as repos and teams change. Designed for large monoliths and complex estates, it sustains more than 1 million weekly scans while preserving per-repo controls and ownership.

Native Windows support for CLI and IDEs (GA)

Run Semgrep on Windows without WSL or Docker. Install with pip and use from CLI and IDEs like VS Code, IntelliJ, and Cursor. Example: pip install semgrep && semgrep login && semgrep ci.