From 2f1921c8d90935ba99620d0fb14fcefff4591cab Mon Sep 17 00:00:00 2001
From: "Robert Kent Jr." <mrrobertkent@gmail.com>
Date: Thu, 8 Oct 2026 17:09:44 -0400
Subject: [PATCH] Socket: repository configuration

---
 socket.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 socket.yml

diff --git a/socket.yml b/socket.yml
new file mode 100644
index 0000000..8f9ab54
--- /dev/null
+++ b/socket.yml
@@ -0,0 +1,14 @@
+version: 2
+
+# Socket ingests package manifests only: go.mod and go.sum, plus the workflows under .github/workflows
+# (GitHub Actions support is experimental). Container images in the Dockerfile and the example compose
+# files are not ingested; Dependabot keeps their digest pins current.
+projectIgnorePaths:
+  - "dist"
+
+githubApp:
+  enabled: true
+  pullRequestAlertsEnabled: true
+  dependencyOverviewEnabled: true
+  projectReportsEnabled: true
+  disableCommentsAndCheckRuns: false