# ─── websec-audit .gitignore ──────────────────────────────────────────────────

# Scan results (never commit target data)
results_*/
/results/
*.results/

# Log files
*.log
logs/

# Reports generated by the tool
reports/
*.html
*.json
!package.json
!composer.json

# Raw finding dumps
findings.jsonl
findings_raw.jsonl

# Backup files
*.bak
*.backup
*.orig
*.old
*.tmp
*.swp
*~

# OS files
.DS_Store
.DS_Store?
._*
.Spotlight-V100
.Trashes
ehthumbs.db
Thumbs.db
desktop.ini

# Editor files
.idea/
.vscode/
*.sublime-project
*.sublime-workspace
.project
.classpath

# Python
__pycache__/
*.py[cod]
*$py.class
*.egg-info/
dist/
build/
.eggs/
*.egg
.venv/
venv/
env/

# Ruby gems
*.gem
.bundle/
vendor/bundle/

# Go
bin/
pkg/

# Archives
*.zip
*.tar.gz
*.tar.bz2
*.tgz

# Temp directories
tmp/
temp/
.tmp/
cache/

# CI/CD secrets
.env
.env.*
!.env.example
secrets.txt
credentials

# Wordlists (too large for git; users install via apt/seclists)
wordlists/
*.wordlist
*.dict
rockyou.txt

# nmap output
*.nmap
*.gnmap
*.xml.bak

# Output from specific tools
sqlmap_output/
nikto_reports/
testssl_output/