Scan output shows up here.
Runs entirely in your browser via WebAssembly — nothing you paste or upload here is sent anywhere.
Scan output shows up here.
.vlotpipe.yml from the fields below, or skip straight
to free-form editing on the right — both are the same file. Fields
here cover the common case (select, report,
ignore); custom_rules: and per-code
rules: overrides are free-form only — see the comments
in the editor for their syntax.
Which rule codes/prefixes can fail "check" — e.g. SEC, TIMEOUT001. Empty means every rule can gate the build. Independent of "report.select" below: narrowing this never narrows what's shown.
Which rule codes/prefixes appear in scan output — e.g. SEC, TIMEOUT001. Empty means everything is shown. Lets a repo gate on a small set while still seeing (or hiding) a wider backlog.
URL to push the complete, unfiltered finding set to after a scan (for a fleet-wide dashboard). The URL is fine to commit; a bearer token is never a config-file field — see docs/INTEGRATIONS.md.
Suppress a finding repo-wide. A bare code (leave path/reason blank) matches everywhere with no reason on record; fill in path/reason/expires for a documented, scoped exception.
Overwrites the editor on the right with what's in this form. Hand-edits made directly in the editor won't survive clicking this again.