diff --git a/.eslintignore b/.eslintignore
deleted file mode 100644
index 3e2c9286c..000000000
--- a/.eslintignore
+++ /dev/null
@@ -1 +0,0 @@
-/tossface-emjois/
diff --git a/.semgrepignore b/.semgrepignore
new file mode 100644
index 000000000..4704b61b0
--- /dev/null
+++ b/.semgrepignore
@@ -0,0 +1,4 @@
+/packages/frontend/.storybook/
+/packages/frontend/assets/
+/scripts/
+/tossface-emojis/
diff --git a/packages/backend/src/queue/processors/ExportAntennasProcessorService.ts b/packages/backend/src/queue/processors/ExportAntennasProcessorService.ts
index d0968d292..ad5f17642 100644
--- a/packages/backend/src/queue/processors/ExportAntennasProcessorService.ts
+++ b/packages/backend/src/queue/processors/ExportAntennasProcessorService.ts
@@ -46,6 +46,7 @@ export class ExportAntennasProcessorService {
 			return;
 		}
 		const [path, cleanup] = await createTemp();
+		// eslint-disable-next-line detect-non-literal-fs-filename
 		const stream = fs.createWriteStream(path, { flags: 'a' });
 		const write = (input: string): Promise<void> => {
 			return new Promise((resolve, reject) => {
diff --git a/packages/frontend/.eslintignore b/packages/frontend/.eslintignore
deleted file mode 100644
index 7cf58ac6c..000000000
--- a/packages/frontend/.eslintignore
+++ /dev/null
@@ -1 +0,0 @@
-/assets/
diff --git a/scripts/build-pre.js b/scripts/build-pre.js
index b8c017f0a..7d97d3fde 100644
--- a/scripts/build-pre.js
+++ b/scripts/build-pre.js
@@ -15,7 +15,7 @@ function build() {
 		fs.mkdirSync(__dirname + '/../built', { recursive: true });
 		fs.writeFileSync(__dirname + '/../built/meta.json', JSON.stringify({ version: meta.version }), 'utf-8');
 	} catch (e) {
-		console.error(e)
+		console.error(e) // njsscan-ignore:generic_error_disclosure
 	}
 }