Support .gitignore

[vlsi]

Currently, the tool scans all the files and folders, including build artifacts and node_modules.

I suggest scanning only files that are under git control (or git tracked + untracked files).