Docs

Configuration

Optional. Without a config file Railo uses conservative defaults: it acts on ERROR-severity findings and keeps fixes small.

.railo.yml

Put a .railo.yml at the root of the repository. A file that does not validate fails the run with the line that is wrong, rather than being silently ignored.

# .railo.yml — optional. Every key has a default.
rules:
  severity_threshold: ERROR   # act on INFO, WARNING or ERROR and above
max_diff_lines: 500           # skip a fix that would change more lines
max_files_changed: 10         # skip fixes that would touch more files
test_before_commit: false     # direct pushes only: run test_command before pushing
test_command: pytest
baseline_mode: false          # true: report only findings new since the baseline

Ignoring paths

A .railoignore at the root lists paths Railo never scans or changes, one pattern per line. To read a different file, set ignore_file in .railo.yml to its path.

# .railoignore — paths Railo never scans or changes
tests/fixtures/
vendor/
*.min.js

Telemetry

The Action sends a usage ping with the repository name, mode, counts and scan time. Set RAILO_TELEMETRY: "0" in the step's env to turn it off.

Something missing from these docs? Email zarif.latif@railo.dev.