# Semgrep ignore — paths excluded from SAST scans. # # Add specific paths or globs here when a rule produces unavoidable # false positives (e.g. mock servers using http://localhost, generated # code that trips security patterns). # # Example: # src/mocks/*.test.ts # # Prefer inline `// nosemgrep: -- ` over path-level # exclusions when the case is local; reserve this file for whole files # that legitimately need to be skipped.