extends: - recommended rules: security-defined: off