# Paths that the OpenGrep SAST scan skips. The managed sast-scan workflow runs
# OpenGrep from the repository root, which reads this file.
#
# This file replaces the default ignore list of OpenGrep, so the first block
# repeats those defaults (OpenGrep 1.12.0, src/targeting/Semgrepignore.ml).

# Administrative folder or file used by popular version control systems
.git
.svn
.hg
_darcs
CVS

# Paths to files and folders that are typically large and ignorable
build/
vendor/
dist/
*.min.js
.env/
.tox/

# Package managers
node_modules/
.npm/
.yarn/
.venv/
_opam/
_build/
_cargo/

# Common test paths
test/
tests/
testsuite/
*_test.go

# End of the OpenGrep defaults.

# Test data: test keys, sample reports with fake tokens, and test fixtures.
testdata/

# Development-only setup: development keys, Dex users and docs with example
# tokens. None of it is shipped.
devel/

# Documentation of the vendored Bitnami charts, also of nested chart dependencies.
deployment/chainloop/charts/**/README.md
