rules:
  cache-poisoning:
    disable: true
  secrets-outside-env:
    disable: true