bearer.yml

disable-version-check: false
report:
  exclude-fingerprint:
    # Publicly available API and Key
    - d5fbfc19455cc1a121a095175069790c_0
  format: ''
  no-color: false
  output: ''
  report: security
  severity: critical,high,medium,low,warning
rule:
  disable-default-rules: false
  only-rule: []
  skip-rule: []
scan:
  context: ''
  data_subject_mapping: ''
  disable-domain-resolution: true
  domain-resolution-timeout: 3s
  external-rule-dir: []
  force: false
  internal-domains: []
  log-level: info
  parallel: 0
  quiet: false
  scanner:
    - sast
    - secrets
  skip-path:
    # Used only to generate documentation - not part of the live site
    - 'apps/console-api-docs/static/swagger-ui.js'
    - 'build/typedoc_utils.js'
    # Deployment script, changes icons and is not part of the live site.
    - '.github/scripts/update-console-favicon.js'
    - '.github/scripts/update-slcsp-favicon.js'
    # Console logging in test suites
    - 'apps/enroll-e2e/src/support/commands.ts'
    - 'apps/slcsp-calculator-e2e/src/support/commands.ts'