# Semgrep ruleset — Лидерра (#25)
# Docs: https://semgrep.dev/docs/writing-rules/rule-syntax
# Локально: npm run sast  (требует pip install semgrep)
# CI: .github/workflows/sast.yml  (ubuntu-latest, без установки)

rules: []  # custom rules — пустые; используем облачные рулсеты через --config p/...

paths:
  include:
    - app/app
    - app/resources/js
    - app/database/migrations
  exclude:
    - app/vendor
    - app/node_modules
    - app/storage
    - "**/*.min.js"
    - "**/*.min.css"
    - "**/_ide_helper*.php"
    - "**/phpstan-baseline.neon"
