symbolicator/warden.toml at master · getsentry/symbolicator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
# Warden Configuration
# https://github.com/getsentry/warden
#
# Warden reviews code using AI-powered skills triggered by GitHub events.
# Skills live in .agents/skills/ or .claude/skills/
#
# Add skills with: warden add <skill-name>

version = 1

# Default settings inherited by all skills
[defaults]
# Severity levels: critical, high, medium, low, info
# failOn: minimum severity that fails the check
failOn = "high"
# reportOn: minimum severity that creates PR annotations
reportOn = "medium"

# Scope all skills to Rust source under crates/.
# `type = "local"` makes them run on CLI invocations (bare `warden` and `warden <git-ref>`).
# Add a `pull_request` trigger alongside it if you also want them to run in CI.

[[skills]]
name = "security-review"
paths = ["crates/**/*.rs"]

# `local` for CLI runs; `pull_request` so committing this file cannot drop
# security-review from PRs. In layered config the org base wins this duplicate;
# this trigger guards the repo-only resolution case.
[[skills.triggers]]
type = "local"
[[skills.triggers]]
type = "pull_request"
actions = ["opened", "synchronize", "reopened"]

[[skills]]
name = "code-review"
paths = ["crates/**/*.rs"]

[[skills.triggers]]
type = "local"

# DoS / resource-exhaustion review, pulled from the shared warden-skills repo.
# Applied per-repo (opt-in) rather than as a warden default. Runs in CI on PRs.
[[skills]]
name = "wrdn-dos-review"
remote = "getsentry/warden-skills"
paths = ["crates/**/*.rs"]

[[skills.triggers]]
type = "pull_request"
actions = ["opened", "synchronize", "reopened"]