Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
48 changes: 29 additions & 19 deletions docs/kb/semgrep-appsec-platform/search-filter-sort-findings.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -6,28 +6,36 @@ description: "Semgrep AppSec Platform provides you with an overview of the findi
Learn more about the filters Semgrep offers using the following articles:

<CardGroup cols={2}>
<Card title="Semgrep Code filters" horizontal href="/semgrep-code/findings#filter-findings" icon="file" />
<Card title="Supply Chain filters" horizontal href="/semgrep-supply-chain/findings#filter-findings" icon="file" />
<Card title="Secrets filters" horizontal href="/semgrep-secrets/triage-remediation#default-secrets-page-view-and-branch-logic" icon="file" />
<Card title="Semgrep Code filters" icon="file" horizontal href="/semgrep-code/findings#filter-findings"></Card>
<Card title="Supply Chain filters" icon="file" horizontal href="/semgrep-supply-chain/findings#filter-findings"></Card>
<Card title="Secrets filters" icon="file" horizontal href="/semgrep-secrets/triage-remediation#default-secrets-page-view-and-branch-logic"></Card>
</CardGroup>

The following sections of this article explain how you can use filters to identify a specific subset of findings.

## Identify Semgrep Code findings flagged as false positives

Sign in to [<Icon icon="arrow-up-right-from-square" /> Semgrep AppSec Platform](https://semgrep.dev/login), and navigate to **Code**. You can view findings with a status of **Ignored > False positive** from either the default **Production backlog** view or the **Pre-production** view. The **Production backlog** displays all Semgrep Code findings, while **Pre-production** displays the findings about which Semgrep left comments.
Sign in to <Icon icon="arrow-up-right-from-square" /> [Semgrep AppSec Platform](https://semgrep.dev/login), and navigate to **Code**. You can view findings with a status of **Ignored \> False positive** from either the default **Production backlog** view or the **Pre-production** view. The **Production backlog** displays all Semgrep Code findings, while **Pre-production** displays the findings about which Semgrep left comments.

## Identify Semgrep Code findings flagged by Multimodal as false positives

The **Autotriage** filter lists findings that Semgrep Multimodal evaluated as likely false positives. This includes both:

- **Rule-based findings**, which Semgrep automatically moves to the **Provisionally ignored** status when Multimodal flags them as false positives.
- **AI-powered detection findings**, which remain **Open** even when Multimodal flags them as false positives. AI-powered detection findings are not auto-triaged to **Provisionally ignored**, so you must use the **Autotriage** filter to find them.

<Steps>
<Step>
Sign in to [<Icon icon="arrow-up-right-from-square" /> Semgrep AppSec Platform](https://semgrep.dev/login).
Sign in to <Icon icon="arrow-up-right-from-square" />[ Semgrep AppSec Platform](https://semgrep.dev/login).
</Step>
<Step>
Navigate to **Code**.
Navigate to **Code**.
</Step>
<Step>
Find the **Multimodal autotriage** filter, and click **False positive**.
Find the **Autotriage** filter, and click **False positive**.
</Step>
<Step>
Optional: To narrow results to only AI-powered detection findings, also apply the **AI-powered scan findings** filter.
</Step>
</Steps>

Expand All @@ -39,27 +47,29 @@ This method can be used for Semgrep Code and Supply Chain.

<Steps>
<Step>
Sign in to [<Icon icon="arrow-up-right-from-square" /> Semgrep AppSec Platform](https://semgrep.dev/login).
Sign in to <Icon icon="arrow-up-right-from-square" />[ Semgrep AppSec Platform](https://semgrep.dev/login).
</Step>
<Step>
Navigate to either the **Code** or **Supply Chain** page depending on which type of finding you're looking for.

&emsp;&emsp;i. For Semgrep Code findings, the Rule ID is the heading of each group of findings. Copy this value.
<Frame caption="Figure. Rule ID and Rule filter placement.">

  i. For Semgrep Code findings, the **Rule ID** is the heading of each group of findings. Copy this value.

<Frame caption="Figure. Rule ID and Rule filter placement.">
![Rule ID and Rule filter placement.](/images/kb/semgrep-appsec-platform/search-filter-sort-findings/code-ruleID.png)
</Frame>

&emsp;&emsp;ii. For Semgrep Supply Chain findings, the **CVE** or **MAL** ID is shown on the upper-right heading of each group of findings. Copy this value. Add a dash between the prefix, such as MAL or CVE, and the numerical value.
<Frame caption="Figure. Rule ID and Rules filter placement.">
</Frame>

  ii. For Semgrep Supply Chain findings, the **CVE** or **MAL** ID is shown on the upper-right heading of each group of findings. Copy this value. Add a dash between the prefix, such as MAL or CVE, and the numerical value.

<Frame caption="Figure. Rule ID and Rules filter placement.">
![Rule ID and Rules filter placement.](/images/kb/semgrep-appsec-platform/search-filter-sort-findings/sca-ruleid.png)
</Frame>
</Frame>
</Step>
<Step>
Enter the value you copied in the **Rule** filter for Semgrep Code or **Rules** filter for Semgrep Supply Chain. This narrows down the findings to that specific rule or CVE.
</Step>
</Step>
<Step>
You can continue adding values to the rules filter. The rules filter includes findings from **any** of the values indicated.
</Step>
</Step>
</Steps>

From there, you can apply any other filters as necessary.
From there, you can apply any other filters as necessary.
Loading
Loading