diff --git a/ci_scripts/packages.txt b/ci_scripts/packages.txt
index 68a5e2bcb..ee1c0f0d7 100644
--- a/ci_scripts/packages.txt
+++ b/ci_scripts/packages.txt
@@ -135,6 +135,7 @@ ruamel-yaml-clib
 scikit-image
 scikit-learn
 scipy
+semgrep
 scs
 sentencepiece
 setproctitle
diff --git a/docs/packages/semgrep.yaml b/docs/packages/semgrep.yaml
new file mode 100644
index 000000000..89e955647
--- /dev/null
+++ b/docs/packages/semgrep.yaml
@@ -0,0 +1,8 @@
+package-name: semgrep
+source-code: https://github.com/semgrep/semgrep
+license: LGPL-2.1-or-later
+versions:
+  - version: 1.174.0
+    patched:
+    comment: '`Link <https://github.com/riseproject-dev/python-wheels/releases/download/semgrep-v1.174.0/gpl-sources.tar>`__
+  to sources of bundled GPL libraries (the shared libraries bundled next to semgrep-core)'