security-review/ruff.toml

# canary/ is the intentionally-vulnerable scanner-recall corpus: it must stay
# byte-stable (canary-meta/KEY.md keys findings to its line numbers) and linting
# deliberately-bad code is meaningless, so ruff skips it entirely.
extend-exclude = ["canary"]
fix(ci): exclude canary corpus from ruff, add import smoke test CI has been red repo-wide: the latest ruff wants to reformat the intentionally-vulnerable canary fixtures (whose line numbers are keyed in canary-meta/KEY.md), and pytest --collect-only exits 5 with zero tests. Exclude canary/ via ruff.toml and add a root-level import smoke test so collection is non-empty and imports cross_review.py. 2026-07-14 19:15:53 -04:00			`# canary/ is the intentionally-vulnerable scanner-recall corpus: it must stay`
			`# byte-stable (canary-meta/KEY.md keys findings to its line numbers) and linting`
			`# deliberately-bad code is meaningless, so ruff skips it entirely.`
			`extend-exclude = ["canary"]`