rules:
  artipacked:
    ignore:
      # git-auto-commit-action requires persist-credentials for pushing
      - schema-update.yml
  secrets-outside-env:
    ignore:
      # These workflows use repository-level secrets without dedicated environments,
      # which is acceptable for this project's threat model
      - ci.yml
      - claude-code-review.yml
      - claude-issue-similar.yml
      - claude-issue-triage.yml
      - claude.yml
  adhoc-packages:
    ignore:
      # Installing repomix at a user-specified version is this action's core function,
      # so it cannot go through a lockfile
      - action.yml
      # Intentional: update npm itself to latest before publishing
      - npm-publish.yml
      # Intentional: downgrade npm to 11.4.0 so it can prepare the github:repomix
      # git dependency without the min-release-age/--before conflict in npm 12
      - ci-website.yml