Create socket.yml

[kpj2006]

Addressed Issues:

Fixes #(issue number)

Screenshots/Recordings:

Additional Notes:

Checklist

• My code follows the project's code style and conventions
• I have made corresponding changes to the documentation
• My changes generate no new warnings or errors
• I have joined the Discord server and I will share a link to this PR with the project maintainers there
• I have read the Contributing Guidelines

⚠️ AI Notice - Important!

We encourage contributors to use AI tools responsibly when creating Pull Requests. While AI can be a valuable aid, it is essential to ensure that your contributions meet the task requirements, build successfully, include relevant tests, and pass all linters. Submissions that do not meet these standards may be closed without warning to maintain the quality and integrity of the project. Please take the time to understand the changes you are proposing and their impact.

Summary by CodeRabbit

• New Features
  • Added automated scan configuration for pull requests and dependency changes.
  • Enabled pull request alerts, dependency overviews, and project reports.
  • Configured scans to focus on relevant dependency manifest changes while excluding common build artifacts and generated files.

[coderabbitai]

Warning

Review limit reached

@kpj2006, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 8 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 9b9c9bcd-4f27-4daf-a387-fe105eabace0

📥 Commits

Reviewing files that changed from the base of the PR and between e914569 and b65919d.

📒 Files selected for processing (1)

• socket.yml

Walkthrough

Adds socket.yml with Socket scan exclusions, dependency manifest rescan triggers, GitHub App reporting settings, ignored bot accounts, and enabled comments/check runs.

Changes

Socket scan configuration

Layer / File(s)	Summary
Scan orchestration settings socket.yml	Configures ignored directories and artifacts, dependency manifest trigger paths, GitHub App alerts and reports, ignored bot users, and comment/check-run behavior.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Poem

I’m a bunny with a config to share,
Keeping noisy folders out of the lair.
Locks wake scans when changes appear,
Reports hop in, crisp and clear.
Comments and checks are ready to cheer!

🚥 Pre-merge checks | ✅ 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately and concisely describes the main change: adding a new socket.yml file.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

	Messages
📖	⚠️ PR Template Check These are non-blocking, but please fix: Please replace the placeholder Fixes #(issue number) with the actual issue number (e.g. Fixes #42). Some required checklist items are not completed: My PR addresses a single issue My code follows the project's code style My changes generate no new warnings or errors

Generated by 🚫 dangerJS against b65919d

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@socket.yml`:
- Around line 11-14: Update the projectIgnorePaths configuration to stop broadly
excluding supported lockfiles; remove the "**/*.lock" rule or add explicit
negations for every lockfile intended for dependency scanning. Ensure those same
lockfiles remain listed in triggerPaths, without relying on triggerPaths to
override ingestion ignores.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: d9845671-5865-4556-b7a4-51140bea1c25

📥 Commits

Reviewing files that changed from the base of the PR and between b380447 and e914569.

📒 Files selected for processing (1)

• socket.yml