checks:
  required_workflows:
    main.yaml: False
    rebuild.yaml: False
  versions:
    rebuild: False
  codespell:
    ignore_re:
      - ^contribs/gmf/test/spec/data/themescapabilities\.js$
      - ^contribs/gmf/test/spec/data/themes\.js$
      - ^buildtools/asitvd.capabilities\.xml$
      - ^examples/measure\.js$
      - ^src/bootstrap-custom\.css\.map$
  dependabot_config:
    update_ignore:
      - directory: /
        package-ecosystem: npm

audit:
  npm:
    cwe_ignore:
      - CWE-22 # Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
      - CWE-59 # Improper Link Resolution Before File Access ('Link Following')
      - CWE-61 # UNIX Symbolic Link (Symlink) Following
      - CWE-77 # Improper Neutralization of Special Elements used in a Command ('Command Injection')
      - CWE-331 # Insufficient Entropy
      - CWE-400 # Uncontrolled Resource Consumption
      - CWE-532 # Insertion of Sensitive Information into Log File
      - CWE-918 # Server-Side Request Forgery (SSRF)
      - CWE-295 # Improper Certificate Validation
      - CWE-346 # Origin Validation Error
      - CWE-125 # Out-of-bounds Read

checks:
  required_workflows:
    main.yaml: False
    rebuild.yaml: False
  versions:
    rebuild: False
  codespell:
    ignore_re:
      - ^contribs/gmf/test/spec/data/themescapabilities\.js$
      - ^contribs/gmf/test/spec/data/themes\.js$
      - ^buildtools/asitvd.capabilities\.xml$
      - ^examples/measure\.js$
      - ^src/bootstrap-custom\.css\.map$
  dependabot_config:
    update_ignore:
      - directory: /
        package-ecosystem: npm

audit:
  npm:
    cwe_ignore:
      - CWE-22 # Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
      - CWE-59 # Improper Link Resolution Before File Access ('Link Following')
      - CWE-61 # UNIX Symbolic Link (Symlink) Following
      - CWE-77 # Improper Neutralization of Special Elements used in a Command ('Command Injection')
      - CWE-331 # Insufficient Entropy
      - CWE-400 # Uncontrolled Resource Consumption
      - CWE-532 # Insertion of Sensitive Information into Log File
      - CWE-918 # Server-Side Request Forgery (SSRF)
      - CWE-295 # Improper Certificate Validation
      - CWE-346 # Origin Validation Error
      - CWE-125 # Out-of-bounds Read
    package_ignore:
      - webpack-dev-server
      - typedoc

Add packages to be ignored
Add packages to be ignored
