config

type Config struct {
	// FailOn is the gate threshold (info|low|medium|high|critical). A CLI
	// -fail-on overrides it.
	FailOn string `yaml:"fail-on"`
	// Exclude drops findings whose file matches any of these path globs. Include,
	// when non-empty, keeps only findings whose file matches one of them (applied
	// before Exclude). Globs use '*' (within a path segment), '**' (across
	// segments), and a bare name matches any path segment (so "testdata" matches
	// any testdata/ directory).
	Exclude []string `yaml:"exclude"`
	Include []string `yaml:"include"`
	Rules   Rules    `yaml:"rules"`
}

type Rules struct {
	Disable           []string          `yaml:"disable"`            // rule IDs to drop entirely
	SeverityOverrides map[string]string `yaml:"severity-overrides"` // rule ID -> new severity
}