diff --git a/security-tools.yml b/security-tools.yml new file mode 100644 index 0000000..65a5ea5 --- /dev/null +++ b/security-tools.yml @@ -0,0 +1,30 @@ +# Tribe and Squad identification +tribe: sdfsdf +squad: sdfsdf + +security_tools: + + # Secrets Detection + secrets_detection: + enabled: 1 + secrets_scanning: 0 + pr_based: + enabled: 0 + + # Static Application Security Testing (SAST) + sast: + enabled: 0 + tools: + codeQL: + enabled: 1 + config_file_path: .github/workflows/codeql.yml + veracode: + enabled: 1 + sonarcloud: + enabled: 0 + sobelow: + enabled: 0 + credo: + enabled: 0 + klocwork: + enabled: 0