vellum-assistant/socket.yml at main · bcdub/vellum-assistant · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
# Socket.dev supply-chain policy. Gates the `socket-security` GitHub App
# checks on every PR.
# Schema is booleans — `{ action: ... }` is silently rejected.
# See docs/socket.md.

version: 2

projectIgnorePaths:
  - "**/node_modules/**"
  - "**/.build/**"
  - "clients/.build/**"
  - "**/dist/**"
  - "**/build/**"
  - "**/*.tsbuildinfo"
  - "**/*.bun-build"

issueRules:
  malware: true
  gptMalware: true
  didYouMean: true
  installScripts: true
  hasNativeCode: true
  shellAccess: true

  licenseChange: true
  deprecated: true
  unmaintained: true
  dynamicRequire: true

  criticalCVE: true
  cve: true
  mediumCVE: false
  mildCVE: false