synapse-ai/.codacy.yaml at master · synapseorch-ai/synapse-ai · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
---
# Codacy configuration — controls both API-upload scans and Actions workflow scans.
# Stack: Python backend + TypeScript/Next.js frontend + Docker
engines:
  # Python security — keep
  bandit:
    enabled: true
  ruff:
    enabled: true
  pylint:
    enabled: true
  prospector:
    enabled: false   # redundant with ruff + pylint
  pylintpython3:
    enabled: false   # duplicate of pylint

  # JavaScript / TypeScript — keep ESLint only
  eslint:
    enabled: true
  jshint:
    enabled: false   # deprecated, ESLint covers it
  tslint:
    enabled: false   # deprecated, ESLint covers it

  # CSS — keep Stylelint only
  stylelint:
    enabled: true
  csslint:
    enabled: false   # redundant with stylelint

  # Infrastructure / Docker
  checkov:
    enabled: true
  hadolint:
    enabled: true

  # Shell scripts (setup.sh, start.sh)
  shellcheck:
    enabled: true
  psscriptanalyzer:
    enabled: false   # PowerShell — not a focus

  # Static analysis
  semgrep:
    enabled: true

  # Disabled — not relevant to this stack
  pmd:
    enabled: false   # Java only
  pmd-7:
    enabled: false   # Java only
  lizard:
    enabled: false   # complexity metrics, not security
  jacksonlinter:
    enabled: false
  markdownlint:
    enabled: false
  remark-lint:
    enabled: false
  opengrep:
    enabled: false
  spectral:
    enabled: false

exclude_paths:
  - node_modules/**
  - frontend/node_modules/**
  - backend/node_modules/**
  - frontend/.next/**
  - backend/venv/**
  - backend/.venv/**
  - backend/chroma_db/**
  - backend/data/**
  - backend/logs/**
  - dist/**
  - frontend-build/**
  - synapse/_frontend/**
  - "**/__pycache__/**"
  - "**/*.egg-info/**"
  # Test code: asserts (B101) and dummy/fake credentials are expected here and
  # are false positives for security scanners.
  - backend/tests/**