rules:
  unpinned-uses:
    config:
      policies:
        "smallstep/*": ref-pin
  secrets-inherit:
    disable: true
  ref-confusion:
    disable: true
  dangerous-triggers:
    ignore:
      - triage.yml
