scan: skip-files: - Gemfile - Gemfile.lock