From a981dfac72a02465c6eb0c6c60ee64fa03abb289 Mon Sep 17 00:00:00 2001 From: Jeremy Meyer Date: Sat, 6 Jun 2026 00:05:35 -0700 Subject: [PATCH] fix(cli): exclude AI agent config directories from scanning Adds and to in . These directories contain AI agent runtime configuration and plugins (e.g. ), not user application code. Without this exclusion, the native SQL injection rule produces a false positive because it matches the word "create" (from natural language text "create a feature branch first") combined with template literal interpolation in agent plugin source. The false positive currently breaks the self-scan binding gate on every PR after #73 introduced the directory. --- packages/cli/src/scanner.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/packages/cli/src/scanner.ts b/packages/cli/src/scanner.ts index c043d83..0e68c90 100644 --- a/packages/cli/src/scanner.ts +++ b/packages/cli/src/scanner.ts @@ -12,6 +12,7 @@ const SUPPORTED_EXTENSIONS = new Set([ const SKIP_DIRS = new Set([ 'node_modules', '.git', 'target', 'vendor', '__pycache__', '.venv', 'venv', '.tox', '.nyc_output', '.parcel-cache', 'bower_components', + '.opencode', '.claude', ]); const MAX_FILE_SIZE = 1_000_000; // 1MB — skip huge files