1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103

# This file was automatically generated by `qlty init`.
# You can modify it to suit your needs.
# We recommend you to commit this file to your repository.
#
# This configuration is used by both Qlty CLI and Qlty Cloud.
#
#     Qlty CLI -- Code quality toolkit for developers
#     Qlty Cloud -- Fully automated Code Health Platform
#
# Try Qlty Cloud: https://qlty.sh
#
# For a guide to configuration, visit https://qlty.sh/d/config
# Or for a full reference, visit https://qlty.sh/d/qlty-toml
config_version = "0"

exclude_patterns = [
  "*_min.*",
  "*-min.*",
  "*.min.*",
  "**/.yarn/**",
  "**/*.d.ts",
  "**/assets/**",
  "**/bower_components/**",
  "**/build/**",
  "**/cache/**",
  "**/config/**",
  "**/db/**",
  "**/deps/**",
  "**/dist/**",
  "**/extern/**",
  "**/external/**",
  "**/generated/**",
  "**/Godeps/**",
  "**/gradlew/**",
  "**/mvnw/**",
  "**/node_modules/**",
  "**/protos/**",
  "**/seed/**",
  "**/target/**",
  "**/templates/**",
  "**/testdata/**",
  "**/vendor/**",
  # Vendored dev-toolkit kit sources (SKILL.md files and the measurement
  # script quality_report.py itself). Excluded with the user's agreement so
  # the instrument is not measured with itself. What this hides: bandit/ruff
  # findings on quality_report.py (subprocess usage, which the script needs
  # to run qlty) — defects there belong to the kit's source, not this repo.
  ".claude/**",
]

test_patterns = [
  "**/test/**",
  "**/spec/**",
  "**/*.test.*",
  "**/*.spec.*",
  "**/*_test.*",
  "**/*_spec.*",
  "**/test_*.*",
  "**/spec_*.*",
]

[smells]
mode = "comment"

[[source]]
name = "default"
default = true


[[plugin]]
name = "bandit"

# radarlint-python removed with the user's agreement: it requires a ~300MB
# JDK that cannot fit on the dedicated ~/.qlty volume (488MB, already full of
# the other tool runtimes) — `qlty init` failed twice with "No space left on
# device" while extracting jdk-22.0.1+8. Its only target was the vendored kit
# script excluded above; bandit and ruff still cover any Python that appears.

[[plugin]]
name = "golangci-lint"
# 2.13.2 (2026-08-27) is built with Go >= 1.26; qlty's default 1.61.0 (go1.23) and its
# latest known 2.6.2 (go1.25) both refuse this repo's `go 1.26.5` ("Go language version
# used to build golangci-lint is lower than the targeted Go version") and abort the run.
version = "2.13.2"

[[plugin]]
name = "biome"

[[plugin]]
name = "ripgrep"
mode = "comment"

[[plugin]]
name = "ruff"
drivers = [
  "lint",
]

[[plugin]]
name = "shellcheck"

[[plugin]]
name = "trufflehog"