optional allowlist: AllowlistConfig[];

optional ci: CIConfig;

optional cloudProjectId: string;

defaultScope: Scope;

optional detection: DetectionConfig;

optional disabledPatterns: string[];

optional envPrefixes: string[];

optional exclude: ExcludeConfig;

optional excludeExtensions: string[];

optional excludePaths: PathExclusion[];

failFast: boolean;

mode: ProtectionMode;

optional notifications: {
  defaultTriggers?: string[];
  enabled?: boolean;
  webhooks?: {
     headers?: Record<string, string>;
     includeDetails?: boolean;
     maxFindings?: number;
     on?: string[];
     type?: string;
     url: string;
  }[];
};

optional defaultTriggers: string[];

optional enabled: boolean;

optional webhooks: {
  headers?: Record<string, string>;
  includeDetails?: boolean;
  maxFindings?: number;
  on?: string[];
  type?: string;
  url: string;
}[];

optional output: OutputConfig;

optional patternOverrides: PatternOverride[];

optional patterns: CustomPattern[];

optional projectName: string;

optional providers: ("auto" | "dotenv" | "environment" | "aws-sm")[];

redactText: string;

shell: string;

stepTimeout: number;

version: string;