version: 2
profile: auto

scan:
  include:
    - ".github/workflows/*.yml"
    - ".github/workflows/*.yaml"
    - "docker-compose.yml"
    - "docker-compose.yaml"
    - "compose.yml"
    - "compose.yaml"
  exclude:
    - ".git/**"
    - "vendor/**"
    - "node_modules/**"

gitleaks:
  path_prefix: ""

ignore:
  paths: []
  variables: []
  findings: []
  rules: []

classifications: {}

risk:
  fail_on: high
  minimum_score: 40

rules: {}

output:
  format: terminal
  no_color: false
  quiet: false
  verbose: false