- Runs on PRs and pushes to dev/uat/main - Uses p/default, p/python, p/typescript, p/owasp-top-ten, p/security-audit, p/secrets - SARIF upload for inline PR annotations - Blocks merge on CRITICAL findings or >5 HIGH findings - Excludes test files, generated code, and third-party deps
16 lines
179 B
Plaintext
16 lines
179 B
Plaintext
# Test files
|
|
**/test_*
|
|
**/tests/**
|
|
**/*_test.py
|
|
**/*_test.ts
|
|
|
|
# Generated
|
|
**/node_modules/**
|
|
**/dist/**
|
|
**/build/**
|
|
**/__pycache__/**
|
|
**/migrations/**
|
|
|
|
# Third-party
|
|
**/vendor/**
|