@lvce-editor/eslint-plugin-github-actions 2.11.0 → 2.12.0

package/dist/index.js

@@ -25,11 +25,15 @@ const npmRegistries = ['https://registry.npmjs.org', 'https://npm.pkg.github.com
 const onProperties = ['push', 'pull_request'];
 const npmCommands = ['run', 'test', 'publish', 'install', 'ci'];
 const shells = ['bash'];
+const permissions$1 = {
+  'id-token': ['write'],
+  contents: ['write']
+};
 
 const isSupported = (actions, value) => {
   return actions.includes(value);
 };
-const meta$a = {
+const meta$c = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported action versions'
@@ -39,7 +43,7 @@ const meta$a = {
   },
   fixable: 'code'
 };
-const create$a = context => {
+const create$c = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -70,8 +74,8 @@ const create$a = context => {
 
 const actionVersions = {
   __proto__: null,
-  create: create$a,
-  meta: meta$a
+  create: create$c,
+  meta: meta$c
 };
 
 const parseVersion = value => {
@@ -95,7 +99,7 @@ const isSupportedMacosversion = version => {
 const isSupportedWindowsVersion = version => {
   return config.windows.includes(version);
 };
-const meta$9 = {
+const meta$b = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported ci versions'
@@ -104,7 +108,7 @@ const meta$9 = {
     unsupportedCiVersion: 'Unsupported ci version: {{value}}'
   }
 };
-const create$9 = context => {
+const create$b = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -147,11 +151,11 @@ const create$9 = context => {
 
 const ciVersions = {
   __proto__: null,
-  create: create$9,
-  meta: meta$9
+  create: create$b,
+  meta: meta$b
 };
 
-const meta$8 = {
+const meta$a = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported fail fast values'
@@ -160,7 +164,7 @@ const meta$8 = {
     unsupportedFailFast: 'Unsupported fail fast value: {{value}}'
   }
 };
-const create$8 = context => {
+const create$a = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -183,11 +187,11 @@ const create$8 = context => {
 
 const failFast = {
   __proto__: null,
-  create: create$8,
-  meta: meta$8
+  create: create$a,
+  meta: meta$a
 };
 
-const meta$7 = {
+const meta$9 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported matrix values'
@@ -196,7 +200,7 @@ const meta$7 = {
     unsupportedMatrix: 'Unsupported matrix value: {{value}}'
   }
 };
-const create$7 = context => {
+const create$9 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -218,11 +222,11 @@ const create$7 = context => {
 
 const matrix = {
   __proto__: null,
-  create: create$7,
-  meta: meta$7
+  create: create$9,
+  meta: meta$9
 };
 
-const meta$6 = {
+const meta$8 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported max parallel values'
@@ -231,7 +235,7 @@ const meta$6 = {
     unsupportedMaxParallel: 'Unsupported max parallel value: {{value}}'
   }
 };
-const create$6 = context => {
+const create$8 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -254,11 +258,11 @@ const create$6 = context => {
 
 const maxParallel = {
   __proto__: null,
-  create: create$6,
-  meta: meta$6
+  create: create$8,
+  meta: meta$8
 };
 
-const meta$5 = {
+const meta$7 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported needs values'
@@ -267,7 +271,7 @@ const meta$5 = {
     unsupportedNeeds: 'Unsupported needs value: {{value}}'
   }
 };
-const create$5 = context => {
+const create$7 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -289,11 +293,11 @@ const create$5 = context => {
 
 const needs = {
   __proto__: null,
-  create: create$5,
-  meta: meta$5
+  create: create$7,
+  meta: meta$7
 };
 
-const meta$4 = {
+const meta$6 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported npm registry values'
@@ -302,7 +306,7 @@ const meta$4 = {
     unsupportedNpmRegistry: 'Unsupported npm registry value: {{value}}'
   }
 };
-const create$4 = context => {
+const create$6 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -327,11 +331,11 @@ const create$4 = context => {
 
 const npmRegistry = {
   __proto__: null,
-  create: create$4,
-  meta: meta$4
+  create: create$6,
+  meta: meta$6
 };
 
-const meta$3 = {
+const meta$5 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported npm commands'
@@ -348,7 +352,7 @@ const isSupportedNpmCommand = value => {
   }
   return false;
 };
-const create$3 = context => {
+const create$5 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -376,11 +380,11 @@ const create$3 = context => {
 
 const npm = {
   __proto__: null,
-  create: create$3,
-  meta: meta$3
+  create: create$5,
+  meta: meta$5
 };
 
-const meta$2 = {
+const meta$4 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported on values'
@@ -389,7 +393,7 @@ const meta$2 = {
     unsupportedOn: 'Unsupported on value: {{value}}'
   }
 };
-const create$2 = context => {
+const create$4 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -416,11 +420,66 @@ const create$2 = context => {
 
 const on = {
   __proto__: null,
-  create: create$2,
-  meta: meta$2
+  create: create$4,
+  meta: meta$4
 };
 
-const meta$1 = {
+const meta$3 = {
+  type: 'problem',
+  docs: {
+    description: 'Disallow unsupported permission values'
+  },
+  messages: {
+    unsupportedPermission: 'Unsupported permission value: {{value}}'
+  }
+};
+const create$3 = context => {
+  const sourceCode = getSourceCode(context);
+  if (!sourceCode.parserServices?.isYAML) {
+    return {};
+  }
+  return {
+    YAMLPair(node) {
+      if (node && node.type === 'YAMLPair' && node.key && typeof node.key === 'object' && 'type' in node.key && node.key.type === 'YAMLScalar' && typeof node.key.value === 'string' && node.key.value === 'permissions' && node.value && typeof node.value === 'object' && 'type' in node.value && node.value.type === 'YAMLMapping') {
+        for (const pair of node.value.pairs) {
+          if (pair.key && pair.key.type === 'YAMLScalar' && typeof pair.key.value === 'string') {
+            const supportedKey = Object.hasOwn(permissions$1, pair.key.value);
+            if (!supportedKey) {
+              context.report({
+                node: pair.key,
+                messageId: 'unsupportedPermission',
+                data: {
+                  value: pair
+                }
+              });
+            } else {
+              if (pair.value && pair.value.type === 'YAMLScalar' && typeof pair.value.value === 'string') {
+                const items = permissions$1[pair.key.value] || [];
+                if (!items.includes(pair.value.value)) {
+                  context.report({
+                    node,
+                    messageId: 'unsupportedPermission',
+                    data: {
+                      value: pair.value
+                    }
+                  });
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  };
+};
+
+const permissions = {
+  __proto__: null,
+  create: create$3,
+  meta: meta$3
+};
+
+const meta$2 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported shell values'
@@ -429,7 +488,7 @@ const meta$1 = {
     unsupportedShell: 'Unsupported shell value: {{value}}'
   }
 };
-const create$1 = context => {
+const create$2 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -454,11 +513,11 @@ const create$1 = context => {
 
 const shell = {
   __proto__: null,
-  create: create$1,
-  meta: meta$1
+  create: create$2,
+  meta: meta$2
 };
 
-const meta = {
+const meta$1 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported timeout minute values'
@@ -467,7 +526,7 @@ const meta = {
     unsupportedTimeoutMinutes: 'Unsupported timeout minutes value: {{value}}'
   }
 };
-const create = context => {
+const create$1 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -489,6 +548,44 @@ const create = context => {
 };
 
 const timeoutMinutes = {
+  __proto__: null,
+  create: create$1,
+  meta: meta$1
+};
+
+const meta = {
+  type: 'problem',
+  docs: {
+    description: 'Disallow unsupported node version file values'
+  },
+  messages: {
+    unsupportedNodeVersionFile: 'Unsupported node version file value: {{value}}'
+  }
+};
+const create = context => {
+  const sourceCode = getSourceCode(context);
+  if (!sourceCode.parserServices?.isYAML) {
+    return {};
+  }
+  return {
+    YAMLPair(node) {
+      if (node && node.type === 'YAMLPair' && node.key && typeof node.key === 'object' && 'type' in node.key && node.key.type === 'YAMLScalar' && typeof node.key.value === 'string' && node.key.value === 'node-version-file' && node.value && typeof node.value === 'object' && 'type' in node.value && node.value.type === 'YAMLScalar') {
+        const nodeValue = node.value.value;
+        if (typeof nodeValue !== 'string' || nodeValue !== '.nvmrc') {
+          context.report({
+            node,
+            messageId: 'unsupportedNodeVersionFile',
+            data: {
+              value: nodeValue
+            }
+          });
+        }
+      }
+    }
+  };
+};
+
+const nodeVersionFile = {
   __proto__: null,
   create,
   meta
@@ -504,12 +601,14 @@ const plugin = {
     'ci-versions': ciVersions,
     'fail-fast': failFast,
     'max-parallel': maxParallel,
+    'node-version-file': nodeVersionFile,
     'npm-registry': npmRegistry,
     'timeout-minutes': timeoutMinutes,
     matrix: matrix,
     needs: needs,
     npm: npm,
     on: on,
+    permissions,
     shell
   }
 };
@@ -527,10 +626,12 @@ const recommended = [{
     'github-actions/fail-fast': 'error',
     'github-actions/matrix': 'off',
     'github-actions/max-parallel': 'error',
+    'github-actions/needs': 'error',
+    'github-actions/node-version-file': 'error',
     'github-actions/npm-registry': 'error',
     'github-actions/npm': 'error',
-    'github-actions/needs': 'error',
     'github-actions/on': 'error',
+    'github-actions/permissions': 'error',
     'github-actions/shell': 'error',
     'github-actions/timeout-minutes': 'error'
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lvce-editor/eslint-plugin-github-actions",
-  "version": "2.11.0",
+  "version": "2.12.0",
   "main": "dist/index.js",
   "type": "module",
   "keywords": [],