| # Paths and file patterns skipped by inventory/triage scanners. | |
| # Secret-like files are metadata-only: record path/reason, never content. | |
| ignore_dirs: | |
| - .git/objects | |
| - node_modules | |
| - .venv | |
| - venv | |
| - __pycache__ | |
| - .cache | |
| - dist | |
| - build | |
| - .next | |
| - target | |
| - vendor | |
| sensitive_files: | |
| - .env | |
| - .env.* | |
| - '*.pem' | |
| - id_rsa | |
| - id_ed25519 | |
| - credentials* | |
| - secrets* | |
| - '*token*' | |
| - '*apikey*' | |
| text_extensions: | |
| - .md | |
| - .txt | |
| - .yaml | |
| - .yml | |
| - .json | |
| - .jsonl | |
| - .toml | |
| - .ini | |
| - .py | |
| - .js | |
| - .ts | |
| - .tsx | |
| - .jsx | |
| - .rs | |
| - .go | |
| - .sh | |