version: "1.0" name: "custom-rules" rules: security.sql_injection: enabled: true severity: critical security.eval_usage: enabled: true severity: critical security.path_traversal: enabled: true severity: high antipattern.exception_swallow: enabled: true severity: medium antipattern.magic_number: enabled: true severity: low antipattern.deep_nesting: enabled: true severity: medium antipattern.long_function: enabled: true severity: medium secret.hardcoded_secret: enabled: true severity: critical performance.inefficient_loop: enabled: true severity: medium performance.redundant_operation: enabled: true severity: low performance.unnecessary_copy: enabled: true severity: low output: format: "rich" # or "json" show_summary: true show_line_numbers: true