la-stack/.codacy.yml at main · acgetchell/la-stack · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
---
# Codacy configuration for la-stack project
#
# This repository is primarily Rust.
# Note: clippy and rustfmt are not supported by Codacy and are handled by GitHub Actions CI.
# cspell:ignore pyproject

engines:
  # === DOCUMENTATION / SCRIPTS ===
  markdownlint:
    enabled: true
    include_paths:
      - "**/*.md"
    config:
      file: ".markdownlint.json"

  shellcheck:
    enabled: true
    include_paths:
      - "**/*.sh"
    config:
      shell: bash
      severity: warning
      include_code: true

  # === PYTHON / SECURITY ===
  # Ruff for Python linting and formatting (reads from pyproject.toml)
  ruff:
    enabled: true
    include_paths:
      - "scripts/**/*.py"
      - "**/*.py"
    config:
      file: "pyproject.toml"

  # Bandit for Python security analysis
  bandit:
    enabled: true
    include_paths:
      - "scripts/**/*.py"
      - "**/*.py"
    config:
      severity: high
      confidence: high
      skips: ["B101", "B102", "B103", "B108", "B110", "B404", "B603", "B607"]
      exclude_info: true
      exclude_dirs: ["tests"]

  # === RUST / SECURITY ===
  lizard:
    enabled: true
    include_paths:
      - "src/**/*.rs"
      - "tests/**/*.rs"
      - "examples/**/*.rs"
      - "benches/**/*.rs"
      - "scripts/**/*.py"
    config:
      languages: ["rust", "python"]
      threshold:
        cyclomatic_complexity: 15
        token_count: 300
        nesting_depth: 5
        parameter_count: 5
        length: 1000

  semgrep:
    enabled: true
    include_paths:
      - "src/**/*.rs"
      - "tests/**/*.rs"
      - "examples/**/*.rs"
      - "benches/**/*.rs"
      - "scripts/**/*.py"

  trivy:
    enabled: true
    config:
      severity: ["HIGH", "CRITICAL"]
      skip_dev_dependencies: true
      enable_secret_scanning: true

  # === DUPLICATION DETECTION ===
  duplication:
    enabled: true
    config:
      minimum_mass: 60
      minimum_tokens: 80
    exclude_paths:
      - "target/**"
      - "coverage/**"
      - "benches/**"
      - "examples/**"
      - "tests/**"

# === GLOBAL EXCLUSIONS ===
exclude_paths:
  - "target/**"
  - "coverage/**"
  - "Cargo.lock"
  - ".git/**"
  - ".cspellcache"
  - ".DS_Store"
  # Python artifacts
  - "__pycache__/**"
  - "*.pyc"
  - ".pytest_cache/**"
  - ".ruff_cache/**"
  - ".mypy_cache/**"
  - "venv/**"
  - ".venv/**"
  - "uv.lock"

# Focus analysis on source, docs, and CI configuration
include_paths:
  - "src/**"
  - "benches/**"
  - "examples/**"
  - "tests/**"
  - "scripts/**"
  - "*.py"
  - "Cargo.toml"
  - "pyproject.toml"
  - "rust-toolchain.toml"
  - "rustfmt.toml"
  - "justfile"
  - ".github/**"
  - "*.md"
  - "*.yml"
  - "*.yaml"
  - "*.json"
  - ".markdownlint.json"
  - "cspell.json"
  - ".codecov.yml"

# Custom file extensions per language (Codacy schema compliant)
languages:
  rust:
    extensions:
      - ".rs"
  python:
    extensions:
      - ".py"
  markdown:
    extensions:
      - ".md"
  yaml:
    extensions:
      - ".yml"
      - ".yaml"
  json:
    extensions:
      - ".json"
  shell:
    extensions:
      - ".sh"