open-vault/scan.hcl
2022-11-23 09:48:04 -06:00

23 lines
435 B
HCL

repository {
# go_modules = true
# osv = true
secrets {
all = true
}
dependabot {
required = true
check_config = true
}
plugin "semgrep" {
use_git_ignore = true
exclude = ["vendor"]
config = ["tools/semgrep/ci", "p/r2c-security-audit"]
exclude_rule = ["generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var"]
}
plugin "codeql" {
languages = ["go"]
}
}