open-vault/scan.hcl

26 lines
499 B
HCL

# Copyright (c) HashiCorp, Inc.
# SPDX-License-Identifier: MPL-2.0
repository {
go_modules = true
osv = true
secrets {
all = true
}
dependabot {
required = true
check_config = true
}
plugin "semgrep" {
use_git_ignore = true
exclude = ["vendor"]
config = ["tools/semgrep/ci", "p/r2c-security-audit"]
exclude_rule = ["generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var"]
}
plugin "codeql" {
languages = ["go"]
}
}