deniedPaths:
  - .env
  - .env.*
  - "**/secrets/**"
  - "**/*.pem"
  - "**/*.key"
  - "**/id_rsa"
  - "**/credentials.json"