Commit `7e27d608f7`

7e27d608f7b0807480c9af0f8bcfa9c70b71ac88

parent: c8890b8d94

Verified · cmc

cmc <hello@cleberg.net> · 2026-10-22 18:57 UTC

Add Qlty config

Ignores the bincode and yaml-rust unmaintained notices. Both come from
syntect 5.3.0, the latest release, and neither is a vulnerability.

Layout: unified · split

.qlty/.gitignore added +7

		@@ -0,0 +1,7 @@
	1	*
	2	!configs
	3	!configs/**
	4	!hooks
	5	!hooks/**
	6	!qlty.toml
	7	!.gitignore

.qlty/qlty.toml added +43

		@@ -0,0 +1,43 @@
	1	config_version = "0"
	2
	3	exclude_patterns = [
	4	"/vendor/",
	5	"/node_modules/",
	6	"/testdata/",
	7	"/dist/",
	8	"/.build/",
	9	"/build/",
	10	"*/.min.*",
	11	"/generated/",
	12	".claude/**",
	13	"/Pods/",
	14	]
	15
	16	test_patterns = [
	17	"/test/",
	18	"/tests/",
	19	"/Tests/",
	20	"*/_test.*",
	21	"*/test_.*",
	22	"*/.test.*",
	23	"*/Tests.swift",
	24	"e2e/**",
	25	]
	26
	27	[[source]]
	28	name = "default"
	29	default = true
	30
	31	[[plugin]]
	32	name = "osv-scanner"
	33
	34	[[plugin]]
	35	name = "trufflehog"
	36
	37	# Both are unmaintained-crate notices, not vulnerabilities. syntect 5.3.0, the
	38	# latest release, needs bincode for its bundled syntax dump and yaml-rust for
	39	# .sublime-syntax files.
	40	[[triage]]
	41	match.plugins = ["osv-scanner"]
	42	match.rules = ["osv-scanner:RUSTSEC-2025-0141", "osv-scanner:RUSTSEC-2024-0320"]
	43	set.ignored = true

Commit 7e27d608f7

Commit `7e27d608f7`