autopentest-ai/.gitignore at main · bhavsec/autopentest-ai · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
# Python
__pycache__/
*.pyc
*.pyo
*.egg-info/
dist/
build/
.venv/

# Environment & secrets
.env
.env.*
*.pem
*.key
*.der
*.crt
*.p12

# macOS
.DS_Store

# IDE
.vscode/
.idea/
*.swp
*.swo

# Engagement runtime data (per-pentest output, contains cookies/tokens/creds)
engagements/*
!engagements/pentest-2026-ginandjuice/
engagements/pentest-2026-ginandjuice/findings.md
!pentest-2026-02-22-dalgona/

# User-specific configs with real credentials (keep example-config.yaml only)
configs/*.yaml
!configs/example-config.yaml

# MCP server engagement data
server/engagements/

# MCP server runtime data (findings, tracking, etc.)
server/data/findings/
server/data/tracking/
server/data/checkpoints/
server/data/deliverables/
server/data/events/
server/data/gate-tracking/
server/data/judge-tracking/
server/data/scope/
server/data/tool-tracking/
server/data/task-trees/
server/data/priority-queues/
server/data/waf-data/
server/data/knowledge-graphs/

# XBOW benchmark data (cloned repo, run state, results)
benchmarks/xbow/repo/
benchmarks/xbow/results/
benchmarks/xbow/run-state.json

# Playwright MCP logs
.playwright-mcp/

# Local docs (roadmap, notes, internal docs)
docs/

# Tool output & temp files
tools/
*.log

# Node modules (Playwright MCP)
node_modules/