---
engines:
markdownlint:
enabled: true
include_paths:
- "**/*.md"
config:
file: ".markdownlint.json"
shellcheck:
enabled: true
include_paths:
- "**/*.sh"
config:
shell: bash
severity: warning
include_code: true
ruff:
enabled: true
include_paths:
- "scripts/**/*.py"
- "**/*.py"
config:
file: "pyproject.toml"
bandit:
enabled: true
include_paths:
- "scripts/**/*.py"
- "**/*.py"
config:
severity: high
confidence: high
skips: ["B101", "B102", "B103", "B108", "B110", "B404", "B603", "B607"]
exclude_info: true
exclude_dirs: ["tests"]
lizard:
enabled: true
include_paths:
- "src/**/*.rs"
- "tests/**/*.rs"
- "examples/**/*.rs"
- "benches/**/*.rs"
- "scripts/**/*.py"
config:
languages: ["rust", "python"]
threshold:
cyclomatic_complexity: 15
token_count: 300
nesting_depth: 5
parameter_count: 5
length: 1000
semgrep:
enabled: true
include_paths:
- "src/**/*.rs"
- "tests/**/*.rs"
- "examples/**/*.rs"
- "benches/**/*.rs"
- "scripts/**/*.py"
trivy:
enabled: true
config:
severity: ["HIGH", "CRITICAL"]
skip_dev_dependencies: true
enable_secret_scanning: true
duplication:
enabled: true
config:
minimum_mass: 60
minimum_tokens: 80
exclude_paths:
- "target/**"
- "coverage/**"
- "benches/**"
- "examples/**"
- "tests/**"
exclude_paths:
- "target/**"
- "coverage/**"
- "Cargo.lock"
- ".git/**"
- ".cspellcache"
- ".DS_Store"
- "__pycache__/**"
- "*.pyc"
- ".pytest_cache/**"
- ".ruff_cache/**"
- ".mypy_cache/**"
- "venv/**"
- ".venv/**"
- "uv.lock"
include_paths:
- "src/**"
- "benches/**"
- "examples/**"
- "tests/**"
- "scripts/**"
- "*.py"
- "Cargo.toml"
- "pyproject.toml"
- "rust-toolchain.toml"
- "rustfmt.toml"
- "justfile"
- ".github/**"
- "*.md"
- "*.yml"
- "*.yaml"
- "*.json"
- ".markdownlint.json"
- "cspell.json"
- ".codecov.yml"
languages:
rust:
extensions:
- ".rs"
python:
extensions:
- ".py"
markdown:
extensions:
- ".md"
yaml:
extensions:
- ".yml"
- ".yaml"
json:
extensions:
- ".json"
shell:
extensions:
- ".sh"