[
  {
      "id": "TRV-CLOUD-001",
      "payload": "../../../.aws/config",
      "tags": [
        "aws",
        "cloud",
        "config",
        "quick"
    ],
      "expected_block": true,
      "severity_hint": "Critical",
      "notes": "AWS CLI configuration file",
      "category": "Traversal"
  },
  {
      "id": "TRV-CLOUD-002",
      "payload": "../../../.azure/credentials",
      "tags": [
        "azure",
        "cloud",
        "credentials"
    ],
      "expected_block": true,
      "severity_hint": "Critical",
      "notes": "Azure credentials file",
      "category": "Traversal"
  },
  {
      "id": "TRV-CLOUD-003",
      "payload": "../../../.gcloud/credentials.db",
      "tags": [
        "gcp",
        "cloud",
        "credentials"
    ],
      "expected_block": true,
      "severity_hint": "Critical",
      "notes": "Google Cloud credentials database",
      "category": "Traversal"
  },
  {
      "id": "TRV-CLOUD-004",
      "payload": "../../../.kube/config",
      "tags": [
        "kubernetes",
        "k8s",
        "config",
        "quick"
    ],
      "expected_block": true,
      "severity_hint": "Critical",
      "notes": "Kubernetes cluster configuration",
      "category": "Traversal"
  },
  {
      "id": "TRV-CLOUD-005",
      "payload": "../../../.ssh/id_ed25519",
      "tags": [
        "ssh",
        "keys",
        "quick"
    ],
      "expected_block": true,
      "severity_hint": "Critical",
      "notes": "Ed25519 SSH private key",
      "category": "Traversal"
  },
  {
      "id": "TRV-CLOUD-006",
      "payload": "../../../.docker/config.json",
      "tags": [
        "docker",
        "registry",
        "credentials"
    ],
      "expected_block": true,
      "severity_hint": "Critical",
      "notes": "Docker registry authentication",
      "category": "Traversal"
  },
  {
      "id": "TRV-CLOUD-007",
      "payload": "../../../.netrc",
      "tags": [
        "credentials",
        "generic"
    ],
      "expected_block": true,
      "severity_hint": "Critical",
      "notes": "Generic network credentials file",
      "category": "Traversal"
  },
  {
      "id": "TRV-CLOUD-008",
      "payload": "../../../.config/gcloud/application_default_credentials.json",
      "tags": [
        "gcp",
        "cloud",
        "credentials"
    ],
      "expected_block": true,
      "severity_hint": "Critical",
      "notes": "Google Cloud application default credentials",
      "category": "Traversal"
  }
]