# Paths excluded from `dvalincode dvalin` scans.
#
# These test files contain deliberately vulnerable-looking strings — they are
# the fixtures that prove the scanner fires. Scanning them reports the tool's
# own test data as findings.
#
# Keep this list surgical. Excluding a file because a finding is inconvenient
# defeats the point; exclude only where the vulnerable pattern is the fixture.

tests/evidence/evidence.test.ts
tests/remediationLocalScan.test.ts
tests/remediationScannerSuite.test.ts
editors/vscode/tests/integration.test.ts
tests/exitCodes.test.ts

# The formula's `brew test` block writes an eval fixture so the test proves a
# real scan works, not just that the binary starts — and the generator carries
# the same string in its template. Excluding the generator is broader than the
# rule above would like; the alternative was splitting the literal to hide it
# from our own scanner, which is worse in a security tool's repository.
Formula/dvalincode.rb
scripts/update-homebrew-formula.mjs
