Repository navigation
Expand file tree
/
Copy pathgreptile.json
More file actions
67 lines (67 loc) · 2.53 KB
/
Copy pathgreptile.json
File metadata and controls
67 lines (67 loc) · 2.53 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
{
"strictness": 2,
"commentTypes": ["logic", "syntax", "style"],
"triggerOnUpdates": true,
"triggerOnDrafts": false,
"shouldUpdateDescription": false,
"updateExistingSummaryComment": true,
"statusCheck": true,
"statusCommentsEnabled": true,
"disabledLabels": ["no-review", "skip-review", "wip"],
"excludeBranches": ["dependabot/**"],
"fileChangeLimit": 80,
"ignoreKeywords": "no-review\nskip-review\nmechanical-format-only",
"ignorePatterns": "node_modules/**\ndist/**\nbuild/**\ncoverage/**\n.vite/**\n.next/**\n.cache/**\n*.lock\npackage-lock.json\nyarn.lock\npnpm-lock.yaml\nassets/**/*.png\nassets/**/*.jpg\nassets/**/*.jpeg\nassets/**/*.gif\nassets/**/*.webp\n**/*.generated.*",
"summarySection": {
"included": true,
"collapsible": true,
"defaultOpen": true
},
"issuesTableSection": {
"included": true,
"collapsible": false,
"defaultOpen": true
},
"confidenceScoreSection": {
"included": true,
"collapsible": true,
"defaultOpen": false
},
"sequenceDiagramSection": {
"included": true,
"collapsible": true,
"defaultOpen": false
},
"customContext": {
"rules": [
{
"scope": [".github/workflows/**"],
"rule": "Flag unpinned third-party GitHub Actions, broad write permissions, persisted checkout credentials in write-token jobs, pull_request_target misuse, and untrusted GitHub context inside shell commands."
},
{
"scope": ["scripts/**", "bin/**", "skills/**/scripts/**"],
"rule": "Treat CLI inputs, URLs, file paths, and subprocess arguments as untrusted. Flag RCE, SSRF, path traversal, unsafe shell usage, and missing regression tests."
},
{
"scope": ["skills/**", "commands/**", "agents/**", "rules/**"],
"rule": "Review for prompt injection, tool-permission creep, destructive-action ambiguity, hidden persistence, and secret exfiltration risks."
},
{
"scope": ["SECURITY.md", "docs/security/**", "README.md"],
"rule": "Ensure package and distribution claims only list official ECC surfaces. Flag unofficial npm packages, stale historical repo paths, and misleading install instructions."
}
],
"files": [
{
"scope": ["**/*"],
"path": "SECURITY.md",
"description": "ECC disclosure policy, official package surfaces, out-of-scope rules, and supply-chain guardrails."
},
{
"scope": ["**/*"],
"path": "AGENTS.md",
"description": "Workspace-level agent routing and operating constraints."
}
]
}
}