.env.example

APP_DEBUG_ENABLED=true
APP_AWS_CONSOLE_URL=https://console.aws.amazon.com
APP_AWS_ACCESS_PORTAL_URL=
APP_AWS_ACCESS_ROLE_NAME=
APP_AWS_SECURITYHUBV2_REGION=

# Auto-close rules (JSON array) - optional
# APP_AUTO_CLOSE_RULES='[{"name":"auto-close-runs-on-container-mounts","enabled":true,"filters":{"finding_types":["PrivilegeEscalation:Runtime/ContainerMountsHostDirectory"],"resource_tags":[{"name":"provider","value":"runs-on.com"}]},"action":{"status_id":5,"comment":"Auto-closed: Expected behavior for runs-on.com ephemeral runners"},"skip_notification":true}]'

# Auto-close rules from S3 (recommended for large rule sets) - optional
# APP_AUTO_CLOSE_RULES_S3_BUCKET=my-securityhub-rules-bucket
# APP_AUTO_CLOSE_RULES_S3_PREFIX=rules/

# Slack integration (optional - both required to enable Slack notifications)
APP_SLACK_TOKEN=
APP_SLACK_CHANNEL=