Files
sapl/.semgrepignore
shridhar.sabat a49bb125c8 ci: add Semgrep SAST security scanning on PRs
- Runs on PRs and pushes to dev/uat/main
- Uses p/default, p/python, p/typescript, p/owasp-top-ten, p/security-audit, p/secrets
- SARIF upload for inline PR annotations
- Blocks merge on CRITICAL findings or >5 HIGH findings
- Excludes test files, generated code, and third-party deps
2026-08-28 11:22:26 +05:30

16 lines
179 B
Plaintext

# Test files
**/test_*
**/tests/**
**/*_test.py
**/*_test.ts
# Generated
**/node_modules/**
**/dist/**
**/build/**
**/__pycache__/**
**/migrations/**
# Third-party
**/vendor/**