mirror of
https://github.com/hashicorp/vault.git
synced 2026-05-11 07:16:28 +02:00
34 lines
727 B
HCL
34 lines
727 B
HCL
# Copyright IBM Corp. 2026, 2025
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
repository {
|
|
go_modules = true
|
|
osv = true
|
|
|
|
dependabot {
|
|
required = true
|
|
check_config = true
|
|
}
|
|
|
|
plugin "codeql" {
|
|
languages = ["go"]
|
|
}
|
|
|
|
plugin "semgrep" {
|
|
use_git_ignore = true
|
|
exclude = ["vendor"]
|
|
config = [
|
|
"tools/semgrep/ci",
|
|
"p/r2c-security-audit",
|
|
"r/trailofbits.go.hanging-goroutine.hanging-goroutine",
|
|
"r/trailofbits.go.racy-append-to-slice.racy-append-to-slice",
|
|
"r/trailofbits.go.racy-write-to-map.racy-write-to-map",
|
|
]
|
|
exclude_rule = ["generic.html-templates.security.unquoted-attribute-var.unquoted-attribute-var"]
|
|
}
|
|
|
|
secrets {
|
|
all = true
|
|
}
|
|
}
|