# --- Python environment (rebuild from Pipfile.lock) ---
.venv/
__pycache__/
*.py[cod]
# note: .python-version IS committed (pins pyenv interpreter for the repo)

# --- Large raw scan artifacts (keep rendered HTML + summary JSON) ---
findings/prowler/*.ocsf.json
findings/prowler/*.csv
findings/prowler/*.json.ocsf
findings/prowler/prowler_run.log
findings/prowler/compliance/
output/

# --- Local AWS / secrets (never commit) ---
.aws/
*.pem
*.env
.env

# --- OS / editor cruft ---
.DS_Store
*.swp
.idea/