Struct SecurityConfig 

pub struct SecurityConfig {
    pub ignore_patterns: Vec<String>,
    pub ignore_paths: Vec<String>,
}

Security configuration for ignore rules.

Loaded from ~/.config/aptu/security.toml with fallback to defaults.

By default, includes sensible ignore paths for common test and vendor directories. Use SecurityConfig::empty() for a configuration with no ignore rules.

Fields

ignore_patterns: Vec<String>

Pattern IDs to ignore (e.g., ["hardcoded-secret", "sql-injection"]).

ignore_paths: Vec<String>

File path prefixes to ignore (e.g., ["test/", "vendor/"]).

Implementations

impl SecurityConfig

pub fn with_defaults() -> Self

👎Deprecated since 0.6.0:

Use SecurityConfig::default() instead

Create configuration with sensible default ignore paths.

This is an alias for Default::default().

pub fn empty() -> Self

Create an empty configuration with no ignore rules.

Use this when you want to scan all files without any filtering.

pub fn should_ignore_path(&self, file_path: &str) -> bool

Check if a file path should be ignored based on configuration.

This is a fast check that can be used before scanning to avoid running expensive regex patterns on files in ignored directories.

Arguments

• file_path - The file path to check

Returns

true if the path should be ignored, false otherwise.

pub fn load() -> Self

Load configuration from ~/.config/aptu/security.toml.

Returns default configuration if file doesn’t exist or parse fails.

Returns

Loaded configuration or default on error.

pub fn config_path() -> Option<PathBuf>

Get the configuration file path.

Returns ~/.config/aptu/security.toml or None if config directory cannot be determined.

pub fn should_ignore(&self, finding: &Finding) -> bool

Check if a finding should be ignored based on configuration.

A finding is ignored if:

• Its pattern ID matches any entry in ignore_patterns
• Its file path starts with any entry in ignore_paths

Arguments

• finding - The finding to check

Returns

true if the finding should be ignored, false otherwise.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> Self

Returns configuration with sensible default ignore paths.

Includes common test and vendor directories that typically contain test fixtures or third-party code that should not be scanned.

impl<'de> Deserialize<'de> for SecurityConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.