ShareConnect/.snyk at main · vasic-digital/ShareConnect · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
# Snyk Configuration for ShareConnect
# Comprehensive security scanning configuration

# Organization settings
org: ${SNYK_ORG_ID}

# Project settings
project-name: ShareConnect
project-tags: android,kotlin,multi-app,sync-platform

# Scanning settings
detection-depth: 6
severity-threshold: medium
fail-on: upgradable

# Exclude patterns
exclude:
  - "**/build/**"
  - "**/generated/**"
  - "**/*.png"
  - "**/*.jpg"
  - "**/*.jpeg"
  - "**/*.gif"
  - "**/*.svg"
  - "**/*.ico"
  - "**/*.webp"
  - "**/*.mp4"
  - "**/*.avi"
  - "**/*.mov"
  - "**/*.pdf"
  - "**/*.doc"
  - "**/*.docx"
  - "**/*.xls"
  - "**/*.xlsx"
  - "**/*.zip"
  - "**/*.rar"
  - "**/*.7z"
  - "**/*.tar.gz"
  - "**/*.jar"
  - "**/*.aar"
  - "**/*.so"
  - "**/*.dex"
  - "**/proguard/**"
  - "**/lint/**"
  - "**/assets/**"
  - "**/res/raw/**"
  - "**/res/xml/**"
  - "**/node_modules/**"
  - "**/.gradle/**"
  - "**/.idea/**"
  - "**/.vscode/**"
  - "**/Documentation/**"
  - "**/docs/**"

# Include patterns for different project types
gradle:
  include:
    - "**/build.gradle"
    - "**/build.gradle.kts"
    - "**/settings.gradle"
    - "**/settings.gradle.kts"

# Remote repository settings
remote-repo-url: ${GIT_REMOTE_URL}

# Integration settings
integration:
  name: ShareConnect
  version: 1.0.0

# Analytics and reporting
disable-analytics: true
json: true
sarif: true

# Custom policies
policies:
  - name: android-security-policy
    severity: high
    rules:
      - id: SNYK-JAVA-*
      - id: SNYK-KOTLIN-*
      - id: SNYK-ANDROID-*

# CI/CD integration
ci: true

# Debug settings (set to true for troubleshooting)
debug: false