security:
# Security policy location
policy: docs/SECURITY.md
# Dependency scanning
dependencies:
- cargo-audit
- cargo-deny
# Secret scanning patterns
secret_scanning:
enabled: true
patterns:
- type: regex
pattern: '[a-zA-Z0-9+/]{40,}'
description: "Potential API key or token"