title: Is there a way to ignore test files for eslint-plugin-security?
body: <p>With a node.js project, I've added eslint-plugin-security and it is giving a lot of warnings for code in my test/spec files (using mochajs).  Since the test code won't be running in production, these don't seem as useful as they do in the project's actual code.  (A lot of Generic Object Injection Sink warnings )</p>
  
  <p>Is there a way to have the security plugin ignore certain files other than putting <code>/* eslint-disable */</code> at the top of every spec file?</p>