defaultConfig.json

{
  "riskTolerance": 20,
  "checks": {
    "code": {
      "linesChanged": {
        "riskStep": 100,
        "riskValuePerStep": 0.1
      },
      "filesChanged": {
        "riskStep": 10,
        "riskValuePerStep": 0.1
      },
      "depscanFindings": {
        "ignoreSeverityList": "INFO, LOW, HIGH",
        "ignoreUnfixable": true,
        "ignoreIndirects": true,
        "missingValue": 10,
        "noVulnerabilitiesCredit": -5
      },
      "bannedLicenses": {
        "licenses": [
          "^GPL",
          "^LGPL",
          "^AGPL",
          "SSPL-1.0",
          "MS-RL",
          "EUPL-1.2",
          "CC-BY-NC-3.0"
        ],
        "missingValue": 0,
        "noVulnerabilitiesCredit": -1
      },
      "auditFindings": {
        "ignoreSeverityList": "LOW, MODERATE, HIGH",
        "missingValue": 10,
        "noAuditsCredit": -5
      }
    },
    "scm": {
      "git": {
        "missingValue": 5
      },
      "enforceGpg": {
        "missingValue": 0.5
      },
      "verifyGpg": {
        "missingValue": 0.5
      },
      "gitleaksFindings": {
        "perFindingValue": 10
      }
    },
    "project": {
      "snykFindings": {
        "ignoreNonUpgradables": true
      },
      "maintenanceFindings": {
        "daysLateRiskStep": 10,
        "daysLateRiskValuePerStep": 5
      },
      "threatModels": {
        "enabled": true,
        "highRiskValue": 10,
        "mediumRiskValue": 5,
        "lowRiskValue": 1,
        "allMitigatedCredit": -3,
        "missingValue": 5
      }
    }
  }
}