# Venruk self-scan suppressions — test fixtures, build output, scanner definitions.
# See docs/architecture/03-integration/phase5/DEVELOPER_WORKFLOW_PLATFORM.md

# Intentional vulnerable samples and test harnesses
tests/
examples/vulnerable*
docs/platform_qualification/

# Next.js build output (minified bundles trigger JS SAST false positives)
src/venruk/dashboard/frontend/
src/venruk/dashboard/web/.next/

# Scanner rule/pattern sources (contain literal exec/eval/AWS patterns by design)
src/venruk/scanners/rulepack/sdk.py
src/venruk/scanners/rulepack/executor.py
src/venruk/scanners/rulepack/packs/
src/venruk/scanners/secrets/patterns.py
src/venruk/scanners/sast/rules/
src/venruk/scanners/sast/taint.py
src/venruk/intelligence/callsite_collector.py
src/venruk/ai/agent_fp.py

# Generated / ingested artifacts
sbom.json
.codecto-reports/
codecto-graph.json
.codecto/
