# Semgrep Ignore Configuration # Files and directories to exclude from security scanning # This file ensures Semgrep scans ALL subdirectories except the excluded ones # Dependencies (CRITICAL - exclude to improve scan performance) node_modules/ .pnp/ .pnp.js vendor/ # Build outputs (generated files, not source code) .next/ out/ build/ dist/ *.d.ts .turbo/ # Test files (optional - uncomment if you want to scan tests for security) # **/*.test.ts # **/*.test.tsx # **/*.spec.ts # **/*.spec.tsx # __tests__/ # __mocks__/ # coverage/ # Configuration files .env* !.env.example # Lock files package-lock.json pnpm-lock.yaml yarn.lock # Git .git/ .gitignore # IDE .vscode/ .idea/ *.swp *.swo *~ # OS files .DS_Store Thumbs.db # Logs logs/ *.log npm-debug.log* yarn-debug.log* yarn-error.log* # Temporary files *.tmp *.temp .cache/ # Documentation (optional) *.md !SECURITY.md # Prisma migrations (generated) prisma/migrations/ # Public assets public/ # Storybook .storybook/ storybook-static/