How to use semgrep registry rulesets

[FraBle]

Question

How do I correctly configure semgrep to leverage rulesets from their public registry?

How to reproduce (optional)

A simple rule file like this throws exit code 7:

rules:
  - p/owasp-top-ten

semgrep error: Invalid rule schema
  --> .semgrep.yaml:2
2 |   - p/owasp-top-ten
  |     ^^^^^^^^^^^^^^^

'p/owasp-top-ten' is not of type 'object'

I want to be able to pass in a list of rulesets.

Expected behavior (optional)

No response

CLI Version

qlty 0.615.0 macos-arm64 (bfe0de3 2026-03-02)

Information about Qlty configuration and environment (optional)

[[plugin]]
name = "semgrep"