settings.example.env

# opencode-pentester settings
# Copy to .env and customize

# Database
PENTEST_HOME="${PENTEST_HOME:-$HOME/.opencode-pentester}"
PENTEST_DB="${PENTEST_DB:-$PENTEST_HOME/findings.db}"
PENTEST_ENGAGEMENT="${PENTEST_ENGAGEMENT:-default}"

# Output directories
PENTEST_OUTPUTS="${PENTEST_OUTPUTS:-outputs}"
PENTEST_REPORTS="${PENTEST_REPORTS:-reports}"

# Tool execution
PENTEST_TIMEOUT="${PENTEST_TIMEOUT:-300}"
PENTEST_PARALLEL="${PENTEST_PARALLEL:-4}"
PENTEST_QUIET="${PENTEST_QUIET:-false}"

# LLM (for reference / agent prompts)
# For best results with opencode, use: DeepSeek V4 Flash Free on Mode Max
PENTEST_LLM_MODEL="${PENTEST_LLM_MODEL:-claude-sonnet-4-20250514}"
PENTEST_LLM_TEMPERATURE="${PENTEST_LLM_TEMPERATURE:-0.2}"

# Scope enforcement
PENTEST_SCOPE_STRICT="${PENTEST_SCOPE_STRICT:-true}"
PENTEST_DESTRUCTIVE="${PENTEST_DESTRUCTIVE:-false}"

# Reporting
PENTEST_REPORT_FORMAT="${PENTEST_REPORT_FORMAT:-markdown}"
PENTEST_INCLUDE_EVIDENCE="${PENTEST_INCLUDE_EVIDENCE:-true}"