.semgrepignore

# Semgrep ignore file
# Ignore test and development files with test credentials

# Test scripts with test credentials (not production secrets)
scripts/create_test_user.rb
scripts/apply_quick_optimizations.sh

# Load test configuration (uses env vars with test-only fallbacks)
load_tests/
security_tests/

# Generated files
vendor/
node_modules/
tmp/
log/
coverage/

# Database schema (generated)
db/schema.rb

# Documentation
*.md

# Legacy/archival nginx configs (no longer deployed — kept for historical reference)
# H2C-smuggling pattern in these files is a known inherited limitation of the
# old config; the active nginx configs (docs-page/, status-page/) do not share this.
DOCS/legacy/

# Rails development/test environment configs: detailed-exceptions is intentional
# in non-production environments and does not represent a real security risk.
config/environments/development.rb
config/environments/test.rb