.env.example

# ─── Database ──────────────────────────────────────────────────────────────────
# Used by all services. Matches the docker-compose.yml defaults.
DATABASE_URL=postgresql://redteam:redteam@db:5432/redteam

# ─── Anthropic ─────────────────────────────────────────────────────────────────
# Required for LLM code review, threat modelling, and attack chain synthesis.
# Get your key at: https://console.anthropic.com/
ANTHROPIC_API_KEY=sk-ant-api03-YOUR_KEY_HERE

# ─── Model selection ───────────────────────────────────────────────────────────
# claude-sonnet-4-5  — recommended: fast, strong reasoning, cost-effective
# claude-opus-4-5    — highest quality; slower and more expensive
LLM_MODEL=claude-sonnet-4-5

# ─── CORS ──────────────────────────────────────────────────────────────────────
# Comma-separated list of allowed origins for the API.
CORS_ORIGINS=http://localhost:3000

# ─── GitHub App (optional — only needed for automatic PR scanning) ─────────────
# Create a GitHub App at: https://github.com/settings/apps/new
# Required events: pull_request, push
# Required permissions: contents:read, pull_requests:write
GITHUB_APP_ID=0
GITHUB_WEBHOOK_SECRET=change-me
GITHUB_APP_PRIVATE_KEY_PATH=./github-app.pem

# ─── Webhook service ───────────────────────────────────────────────────────────
# Internal URL the webhook service uses to forward scan requests to the agent.
AGENT_URL=http://agent:8080
WEBHOOK_PORT=9000

# ─── Agent tuning (optional) ───────────────────────────────────────────────────
SEMGREP_TIMEOUT_SECONDS=120
JOERN_TIMEOUT_SECONDS=300
MAX_REPO_SIZE_MB=500
LOG_LEVEL=INFO