fixup! plugins/semgrep: add csmock semgrep plugin

Explain why we pin Semgrep to a specific version.
csutils · Mar 28, 2024 · f540e36 · f540e36
1 parent 2db96ed
commit f540e36
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/py/plugins/semgrep.py b/py/plugins/semgrep.py
@@ -26,7 +26,8 @@
 # disable metrics to be sent to semgrep cloud
 DEFAULT_SEMGREP_SEND_METRICS = "off"
 
-# This plug-in is pinned to a specific Semgrep version. See
+# This plug-in is pinned to a specific version of Semgrep because newer Semgrep
+# versions break compatibility with externally maintained Semgrep rules. See
 # https://github.com/semgrep/semgrep/releases for available releases.
 SEMGREP_CLI_VERSION = "1.56.0"