diff --git a/.mise/config.toml b/.mise/config.toml
index 68e34713..4784b23e 100644
--- a/.mise/config.toml
+++ b/.mise/config.toml
@@ -1027,7 +1027,6 @@ echo "macos-sdk-check: SDK $sdk (minimum $min)"
 shell = "{{ vars.task_shell }}"
 
 [tasks.ast-grep-check]
-depends = ["ast-grep-check-rule-tests"]
 # --no-ignore hidden so the gha-* YAML rules reach .github/workflows.
 # ast-grep skips dot-dirs by default; gitignored paths like target/ stay skipped.
 description = "Run ast-grep structural-search rules"
@@ -1043,7 +1042,6 @@ description = "Apply autofix for ast-grep rules that define a `fix:` field"
 run = "ast-grep scan --update-all --no-ignore hidden -c config/ast-grep/sgconfig.yaml"
 
 [tasks.semgrep-check]
-depends = ["semgrep-check-rule-tests"]
 description = "Run Semgrep code and configuration rules"
 run = "semgrep scan --config config/semgrep --error --metrics=off ."
 
diff --git a/.semgrepignore b/.semgrepignore
index 8188a635..8daf71e4 100644
--- a/.semgrepignore
+++ b/.semgrepignore
@@ -1 +1,4 @@
-# This file exists to switch the scanner's built-in ignore list off, not to add anything to it.
+# This file exists to switch the scanner's built-in ignore list off; the one entry it adds is a speed fix.
+# Semgrep walks every directory under the project root to load ignore files, and .gitignore does not prune that
+# walk, so without this entry a large local cargo target/ costs minutes per scan before any rule runs.
+/target/