npmx.dev/.coderabbit.yaml at main · npmx-dev/npmx.dev · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
language: en-GB

reviews:
  profile: chill
  # Keep the high-level summary enabled (default), but place it in the
  # walkthrough comment instead of relying on PR description updates.
  high_level_summary_in_walkthrough: true
  review_status: true
  review_details: false
  changed_files_summary: true
  sequence_diagrams: true
  estimate_code_review_effort: false
  assess_linked_issues: true
  related_issues: true
  related_prs: true
  suggested_labels: false
  suggested_reviewers: true
  in_progress_fortune: false
  poem: false

  slop_detection:
    enabled: true
    label: '007'

  auto_review:
    auto_pause_after_reviewed_commits: 5
    labels:
      - '!release'
    ignore_title_keywords:
      - 'WIP'
      - '[skip-review]'
      - 'chore(release)'
    ignore_usernames:
      - 'renovate[bot]'
      - 'dependabot[bot]'
      - 'github-actions[bot]'

  # Built-in PR metadata/content checks. Modes are: off, warning, error.
  pre_merge_checks:
    docstrings:
      mode: off
    title:
      mode: error
    description:
      mode: warning
    issue_assessment:
      mode: warning

  tools:
    gitleaks:
      enabled: true
    osvScanner:
      enabled: true
    actionlint:
      enabled: true
    yamllint:
      enabled: true
    shellcheck:
      enabled: true
    dotenvLint:
      enabled: true

    # Disable tools redundant with our own CI
    eslint:
      enabled: false
    biome:
      enabled: false
    oxc:
      enabled: false
    markdownlint:
      enabled: false
    languagetool:
      enabled: false
    github-checks:
      enabled: false

    # Security-related, but not a good fit for this repo
    checkov:
      enabled: false
    trivy:
      enabled: false
    opengrep:
      enabled: false