Support semgrep rule override via the custom ruleset passthrough property