#################################################################################################################
# Flawnter SAST config file. For more details please visit to our doc at https://www.flawnter.com/documentation
#################################################################################################################
name=TestApp                       # scan or app name you are scanning. This will be added to the report.
scan-type=0                        # 1 = scan only security bugs, 2 = scan only quality bugs, 0 = scan for both, 3 = scan only with AI
scan-category=0                    # 0 = all, 1 = hard coded credentials.
scan-delay=0                       # 0 = no delay (default), any number over zero is delay in milliseconds. For example 1000 is 1 second delay for each scan. Applies to DAST/API scans only.
core-scan=true                     # the main core scan of Flawnter. If you want only extensions to run then set this to false.
binary-scan=true                   # if true it will scan binary/executable files also. 
force-scan=false                   # force scan true will scan the code even if it has NOFLAWNTERSCAN tag.
deep-scan=true                     # Deep Scan. If true will use deep scanning analysis to find more bugs. This may impact performance. 
suppress-output=false              # If set true it will suppress console output and only show the scan summary at the end. Has no effect on GUI.
overwrite-report=true              # If true it will overwrite results report folder if it exists.
scan-comments=false                # If true it will scan code in comments also.
predictive-analysis=true           # Predictive Analysis. If true it will use a rule that is based on predictive analysis algorithms to identify vulnerabilities in code that regular rules may have missed.
autoupdate=false                   # If true it will auto update Flawnter with latest version after a scan. Default is false.
severity=all                       # show critical, high, medium, low, info or all = all severity findings. For multiple severity add pipe (|). 
confidence=all                     # show high, medium, low or all = all confidence findings. For multiple confidence add pipe (|). 
platform=none                      # web, windows, android, ios, macos, other, none or leave it blank. Optional.
lang=auto                          # programming language code is written with. php, c, cpp, cs, vb, vbscript, java, javascript, typescript, nodejs, python, perl, ruby, go, objective-c, swift, kotlin, dart, abap, xml, yaml, cfg, powershell, binary or auto(automatically detect).
debug=false                        # By default debug is off. For troubleshooting and better error messages this can be set true.
data-feeds=nist-legacy,osv         # From where and which format NVD data feeds to use for Dependency Scan. Values can be nist-legacy/nist-github/nist, osv
nvd-api-key=none                   # If you have NIST NVD apikey then you can put it here to increase the limit on number of requests Flawnter can call within 30 seconds window.
misra=                             # If set it will also use MISRA rules to scan. Values can be c2012, none or leave it empty to not use MISRA rules. Default does not use MISRA rules.
#ai-provider=                      # AI provider. If openai-generic it means it is compatible with OpenAI's API. Other providers are ollama, etc.
#ai-url=                           # AI api url.
#ai-api-key=                       # AI api key or leave it empty if there is no api key.
#ai-model=                         # AI model to use for the scan.
#extension=extension.jar           # extension jar file path to run. For multiple extensions just add another newline like this one.
#exclude=fpcode.php                # file/folder name or path to exclude from scan. You can exclude by file hash by using format: <file size>:<file sha1 hash>. You can also use exclude by CVE number using format: CVE-<id number>:<file name/path>. For multiple exclude just add another line.