Files
Miha Kralj d1a5d96d2e fix: exclude .slnx from Snyk scan, restore --all-projects
snyk test --all-projects was resolving QuanTAlib.slnx to the whole solution, bypassing .dcignore and pulling the NativeAOT/benchmark projects. Exclude *.slnx so only lib/quantalib.csproj is scanned. Reverted the --file attempt, which cannot detect a package manager for a bare .csproj.
2026-09-27 18:22:21 -07:00

31 lines
805 B
Plaintext

# Snyk scope: only the shipped library (lib/quantalib.csproj).
# Benchmarks, the NativeAOT wrapper, the Quantower adapter, and the test project
# pull native/validation deps (MyGet feed for OoplesFinance, Tulip.NETCore,
# TALib.NETCore, Wickra, ILCompiler, a local Quantower DLL) that fail Snyk
# dependency-graph enrichment. None of them ship.
# Stale git worktrees (Agent Manager) — never scan.
.kilo/
# Solution file: --all-projects resolves it to the whole solution, bypassing
# the per-project exclusions below and pulling the NativeAOT/benchmark projects.
*.slnx
# Benchmark harness.
perf/
# NativeAOT wrapper (ILCompiler graph).
python/
# Quantower adapter (local SDK HintPath).
quantower/
# Validation/test project.
lib/QuanTAlib.Tests.csproj
# Build artifacts.
bin/
obj/
**/bin/
**/obj/