# Paths and file patterns skipped by inventory/triage scanners.
# Secret-like files are metadata-only: record path/reason, never content.
ignore_dirs:
  - .git/objects
  - node_modules
  - .venv
  - venv
  - __pycache__
  - .cache
  - dist
  - build
  - .next
  - target
  - vendor

sensitive_files:
  - .env
  - .env.*
  - '*.pem'
  - id_rsa
  - id_ed25519
  - credentials*
  - secrets*
  - '*token*'
  - '*apikey*'

text_extensions:
  - .md
  - .txt
  - .yaml
  - .yml
  - .json
  - .jsonl
  - .toml
  - .ini
  - .py
  - .js
  - .ts
  - .tsx
  - .jsx
  - .rs
  - .go
  - .sh