<?php

return [
    'enabled' => env('SECURITY_REPORT_ENABLED', true),

    'notify_email' => env('SECURITY_REPORT_NOTIFY_EMAIL', env('MAIL_FROM_ADDRESS')),

    'scan' => [
        'composer' => env('SECURITY_REPORT_SCAN_COMPOSER', true),
        'npm' => env('SECURITY_REPORT_SCAN_NPM', true),
    ],

    'store_raw' => env('SECURITY_REPORT_STORE_RAW', true),

    'max_raw_kb' => (int) env('SECURITY_REPORT_MAX_RAW_KB', 512),

    'fail_on' => [
        'high' => env('SECURITY_REPORT_FAIL_ON_HIGH', false),
        'critical' => env('SECURITY_REPORT_FAIL_ON_CRITICAL', false),
    ],

    'commands' => [
        'composer_audit' => ['composer', 'audit', '--format=json', '--locked'],
        'composer_outdated' => ['composer', 'outdated', '--direct', '--format=json'],
        'npm_audit' => ['npm', 'audit', '--json'],
        'npm_outdated' => ['npm', 'outdated', '--json'],
    ],

    'timeout_seconds' => 180,
];