abacus/sigrid.yaml at main · kiesraad/abacus · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
languages:
  - name: "css"
  # TODO: "sqlite" is not on Sigrid's supported technology list
  # https://docs.sigrid-says.com/reference/technology-support.html
  - name: "sqlite"
    production:
      include:
        - ".*/migrations/.*[.]sql"
    test:
      include:
        - ".*/fixtures/.*[.]sql"

  - name: "rust"
    production:
    test:
      include:
        - ".*/backend/apportionment/src/test_helpers[.]rs"
        - ".*/backend/apportionment/fuzz/.*[.]rs"
        - ".*/backend/eml_signature/tests/.*[.]rs"
        - ".*/backend/eml_signature/examples/.*[.]rs"
        - ".*/backend/src/api/tests[.]rs"
        - ".*/backend/src/infra/pdf_gen/typst_.*tests[.]rs"
        - ".*/backend/src/test_support[.]rs"
        - ".*/backend/tests/.*[.]rs"
        - ".*/test_data_gen/.*[.]rs"
        - ".*/backend/fuzz/.*[.]rs"

  - name: "typescript"
    production:
    test:
      include:
        - ".*/frontend/[.]storybook/.*"
        - ".*/frontend/.*[.]e2e[.]ts"
        - ".*/frontend/.*[.]stories[.]tsx"
        - ".*/frontend/.*[.]test[.]tsx?"
        - ".*/frontend/@types/.*[.]d[.]ts"
        - ".*/frontend/src/components/error/NotAvailableInMock[.]tsx"
        - ".*/frontend/src/features/dev/.*"
        - ".*/frontend/.*/testing/.*"
        - ".*/frontend/e2e-tests/.*"
    generated:
      include:
        - ".*/frontend/.*/generated/.*[.]tsx?"

exclude:
  - ".*/backend/[.]env"
  - ".*/backend/[.]sqlx/.*"
  - ".*/backend/src/bin/gen-.*[.]rs"
  - ".*/documentatie/.*"
  - ".*/frontend/scripts/.*"
  - ".*/packaging/.*"

dependencychecker:
  blocklist:
    - "abacus"
    - "abacus-fuzz"
    - "apportionment"
    - "apportionment-fuzz"
    - "eml_signature"
    - "pdf_gen"
    - "pdf_gen_impl"
    - "pdf_gen_types"
  transitive: true
  exclude:
    # Marvin Attack on RSA crate, which we do not use (Cargo weak dependency, https://github.com/rust-lang/cargo/issues/10801)
    - vulnerability: "CVE-2023-49092"

component_depth: 1

architecture:
  enabled: true

thirdpartyfindings:
  enabled: true