{ "trivy.secretScanning": true, "semgrep.scan.onlyGitDirty": false }