@lvce-editor/eslint-plugin-github-actions 2.18.0 → 2.20.0

package/dist/index.js

@@ -28,6 +28,7 @@ const npmRegistries = ['https://registry.npmjs.org', 'https://npm.pkg.github.com
 const onProperties = ['push', 'pull_request'];
 const npmCommands = ['run', 'test', 'publish', 'install', 'ci'];
 const shells = ['bash'];
+const pythonVersions = ['3.13', '3.14', '3.15'];
 const permissions$1 = {
   'id-token': ['write'],
   contents: ['write'],
@@ -37,7 +38,7 @@ const permissions$1 = {
 const isSupported = (actions, value) => {
   return actions.includes(value);
 };
-const meta$d = {
+const meta$f = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported action versions'
@@ -47,7 +48,7 @@ const meta$d = {
   },
   fixable: 'code'
 };
-const create$d = context => {
+const create$f = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -78,8 +79,8 @@ const create$d = context => {
 
 const actionVersions = {
   __proto__: null,
-  create: create$d,
-  meta: meta$d
+  create: create$f,
+  meta: meta$f
 };
 
 const parseVersion = value => {
@@ -103,7 +104,7 @@ const isSupportedMacosversion = version => {
 const isSupportedWindowsVersion = version => {
   return config.windows.includes(version);
 };
-const meta$c = {
+const meta$e = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported ci versions'
@@ -112,7 +113,7 @@ const meta$c = {
     unsupportedCiVersion: 'Unsupported ci version: {{value}}'
   }
 };
-const create$c = context => {
+const create$e = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -155,11 +156,11 @@ const create$c = context => {
 
 const ciVersions = {
   __proto__: null,
-  create: create$c,
-  meta: meta$c
+  create: create$e,
+  meta: meta$e
 };
 
-const meta$b = {
+const meta$d = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported fail fast values'
@@ -168,7 +169,7 @@ const meta$b = {
     unsupportedFailFast: 'Unsupported fail fast value: {{value}}'
   }
 };
-const create$b = context => {
+const create$d = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -191,11 +192,11 @@ const create$b = context => {
 
 const failFast = {
   __proto__: null,
-  create: create$b,
-  meta: meta$b
+  create: create$d,
+  meta: meta$d
 };
 
-const meta$a = {
+const meta$c = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported matrix values'
@@ -204,7 +205,7 @@ const meta$a = {
     unsupportedMatrix: 'Unsupported matrix value: {{value}}'
   }
 };
-const create$a = context => {
+const create$c = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -226,11 +227,11 @@ const create$a = context => {
 
 const matrix = {
   __proto__: null,
-  create: create$a,
-  meta: meta$a
+  create: create$c,
+  meta: meta$c
 };
 
-const meta$9 = {
+const meta$b = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported max parallel values'
@@ -239,7 +240,7 @@ const meta$9 = {
     unsupportedMaxParallel: 'Unsupported max parallel value: {{value}}'
   }
 };
-const create$9 = context => {
+const create$b = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -262,11 +263,11 @@ const create$9 = context => {
 
 const maxParallel = {
   __proto__: null,
-  create: create$9,
-  meta: meta$9
+  create: create$b,
+  meta: meta$b
 };
 
-const meta$8 = {
+const meta$a = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported needs values'
@@ -297,7 +298,7 @@ const getValidNeeds = node => {
   }
   return validNeeds;
 };
-const create$8 = context => {
+const create$a = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -305,38 +306,50 @@ const create$8 = context => {
   return {
     YAMLPair(node) {
       if (node && node.type === 'YAMLPair' && node.key && typeof node.key === 'object' && 'type' in node.key && node.key.type === 'YAMLScalar' && typeof node.key.value === 'string' && node.key.value === 'needs' && node.value && typeof node.value === 'object' && 'type' in node.value) {
-        if (node.value.type !== 'YAMLSequence') {
-          context.report({
-            node,
-            messageId: 'unsupportedNeeds',
-            data: {
-              value: stringifyValue(node.value)
-            }
-          });
-          return;
-        }
         const validNeeds = getValidNeeds(node);
-        for (const item of node.value.entries) {
-          if (!item || item.type !== 'YAMLScalar' || typeof item.value !== 'string') {
+        if (node.value.type === 'YAMLScalar' && typeof node.value.value === 'string') {
+          if (!validNeeds.includes(node.value.value)) {
             context.report({
               node,
               messageId: 'unsupportedNeeds',
               data: {
-                value: stringifyValue(item)
+                value: stringifyValue(node.value)
               }
             });
-            continue;
           }
-          if (!validNeeds.includes(item.value)) {
-            context.report({
-              node,
-              messageId: 'unsupportedNeeds',
-              data: {
-                value: stringifyValue(item)
-              }
-            });
+          return;
+        }
+        if (node.value.type === 'YAMLSequence') {
+          for (const item of node.value.entries) {
+            if (!item || item.type !== 'YAMLScalar' || typeof item.value !== 'string') {
+              context.report({
+                node,
+                messageId: 'unsupportedNeeds',
+                data: {
+                  value: stringifyValue(item)
+                }
+              });
+              continue;
+            }
+            if (!validNeeds.includes(item.value)) {
+              context.report({
+                node,
+                messageId: 'unsupportedNeeds',
+                data: {
+                  value: stringifyValue(item)
+                }
+              });
+            }
           }
+          return;
         }
+        context.report({
+          node,
+          messageId: 'unsupportedNeeds',
+          data: {
+            value: stringifyValue(node.value)
+          }
+        });
       }
     }
   };
@@ -344,11 +357,49 @@ const create$8 = context => {
 
 const needs = {
   __proto__: null,
-  create: create$8,
-  meta: meta$8
+  create: create$a,
+  meta: meta$a
 };
 
-const meta$7 = {
+const meta$9 = {
+  type: 'problem',
+  docs: {
+    description: 'Disallow unsupported node version file values'
+  },
+  messages: {
+    unsupportedNodeVersionFile: 'Unsupported node version file value: {{value}}'
+  }
+};
+const create$9 = context => {
+  const sourceCode = getSourceCode(context);
+  if (!sourceCode.parserServices?.isYAML) {
+    return {};
+  }
+  return {
+    YAMLPair(node) {
+      if (node && node.type === 'YAMLPair' && node.key && typeof node.key === 'object' && 'type' in node.key && node.key.type === 'YAMLScalar' && typeof node.key.value === 'string' && node.key.value === 'node-version-file' && node.value && typeof node.value === 'object' && 'type' in node.value && node.value.type === 'YAMLScalar') {
+        const nodeValue = node.value.value;
+        if (typeof nodeValue !== 'string' || nodeValue !== '.nvmrc') {
+          context.report({
+            node,
+            messageId: 'unsupportedNodeVersionFile',
+            data: {
+              value: nodeValue
+            }
+          });
+        }
+      }
+    }
+  };
+};
+
+const nodeVersionFile = {
+  __proto__: null,
+  create: create$9,
+  meta: meta$9
+};
+
+const meta$8 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported npm registry values'
@@ -357,7 +408,7 @@ const meta$7 = {
     unsupportedNpmRegistry: 'Unsupported npm registry value: {{value}}'
   }
 };
-const create$7 = context => {
+const create$8 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -382,11 +433,11 @@ const create$7 = context => {
 
 const npmRegistry = {
   __proto__: null,
-  create: create$7,
-  meta: meta$7
+  create: create$8,
+  meta: meta$8
 };
 
-const meta$6 = {
+const meta$7 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported npm commands'
@@ -403,7 +454,7 @@ const isSupportedNpmCommand = value => {
   }
   return false;
 };
-const create$6 = context => {
+const create$7 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -431,11 +482,11 @@ const create$6 = context => {
 
 const npm = {
   __proto__: null,
-  create: create$6,
-  meta: meta$6
+  create: create$7,
+  meta: meta$7
 };
 
-const meta$5 = {
+const meta$6 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported on values'
@@ -444,7 +495,7 @@ const meta$5 = {
     unsupportedOn: 'Unsupported on value: {{value}}'
   }
 };
-const create$5 = context => {
+const create$6 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -471,11 +522,11 @@ const create$5 = context => {
 
 const on = {
   __proto__: null,
-  create: create$5,
-  meta: meta$5
+  create: create$6,
+  meta: meta$6
 };
 
-const meta$4 = {
+const meta$5 = {
   type: 'problem',
   docs: {
     description: 'Disallow unsupported permission values'
@@ -484,7 +535,7 @@ const meta$4 = {
     unsupportedPermission: 'Unsupported permission value: {{value}}'
   }
 };
-const create$4 = context => {
+const create$5 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
     return {};
@@ -525,6 +576,44 @@ const create$4 = context => {
 };
 
 const permissions = {
+  __proto__: null,
+  create: create$5,
+  meta: meta$5
+};
+
+const meta$4 = {
+  type: 'problem',
+  docs: {
+    description: 'Disallow unsupported python versions'
+  },
+  messages: {
+    unsupportedPythonVersion: 'Unsupported python version: {{value}}'
+  }
+};
+const create$4 = context => {
+  const sourceCode = getSourceCode(context);
+  if (!sourceCode.parserServices?.isYAML) {
+    return {};
+  }
+  return {
+    YAMLPair(node) {
+      if (node && node.type === 'YAMLPair' && node.key && typeof node.key === 'object' && 'type' in node.key && node.key.type === 'YAMLScalar' && typeof node.key.value === 'string' && node.key.value === 'python-version' && node.value && typeof node.value === 'object' && 'type' in node.value && node.value.type === 'YAMLScalar') {
+        const nodeValue = node.value.value;
+        if (typeof nodeValue !== 'string' || !pythonVersions.includes(nodeValue)) {
+          context.report({
+            node,
+            messageId: 'unsupportedPythonVersion',
+            data: {
+              value: nodeValue
+            }
+          });
+        }
+      }
+    }
+  };
+};
+
+const pythonVersion = {
   __proto__: null,
   create: create$4,
   meta: meta$4
@@ -607,12 +696,22 @@ const timeoutMinutes = {
 const meta$1 = {
   type: 'problem',
   docs: {
-    description: 'Disallow unsupported node version file values'
+    description: 'Disallow non-existing working directories'
   },
   messages: {
-    unsupportedNodeVersionFile: 'Unsupported node version file value: {{value}}'
+    invalidWorkingDirectory: 'Working directory not found: {{value}}',
+    workingDirectoryMustBeOfTypeString: 'Working directory must be of type string'
   }
 };
+const allowedNonExistingWorkingDirectories = ['dist', '.tmp'];
+const isAllowedNonExistingWorkingDirectory = relativePath => {
+  for (const item of allowedNonExistingWorkingDirectories) {
+    if (relativePath.startsWith(item)) {
+      return true;
+    }
+  }
+  return false;
+};
 const create$1 = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
@@ -620,12 +719,24 @@ const create$1 = context => {
   }
   return {
     YAMLPair(node) {
-      if (node && node.type === 'YAMLPair' && node.key && typeof node.key === 'object' && 'type' in node.key && node.key.type === 'YAMLScalar' && typeof node.key.value === 'string' && node.key.value === 'node-version-file' && node.value && typeof node.value === 'object' && 'type' in node.value && node.value.type === 'YAMLScalar') {
+      if (node && node.type === 'YAMLPair' && node.key && typeof node.key === 'object' && 'type' in node.key && node.key.type === 'YAMLScalar' && typeof node.key.value === 'string' && node.key.value === 'working-directory' && node.value && typeof node.value === 'object' && 'type' in node.value && node.value.type === 'YAMLScalar') {
         const nodeValue = node.value.value;
-        if (typeof nodeValue !== 'string' || nodeValue !== '.nvmrc') {
+        if (typeof nodeValue !== 'string') {
           context.report({
             node,
-            messageId: 'unsupportedNodeVersionFile',
+            messageId: 'workingDirectoryMustBeOfTypeString',
+            data: {
+              value: nodeValue
+            }
+          });
+          return;
+        }
+        const path = resolve(context.cwd, nodeValue);
+        const relativePath = relative(context.cwd, path);
+        if (!isAllowedNonExistingWorkingDirectory(relativePath) && !existsSync(path)) {
+          context.report({
+            node,
+            messageId: 'invalidWorkingDirectory',
             data: {
               value: nodeValue
             }
@@ -636,7 +747,7 @@ const create$1 = context => {
   };
 };
 
-const nodeVersionFile = {
+const workingDirectory = {
   __proto__: null,
   create: create$1,
   meta: meta$1
@@ -645,22 +756,12 @@ const nodeVersionFile = {
 const meta = {
   type: 'problem',
   docs: {
-    description: 'Disallow non-existing working directories'
+    description: 'Disallow unsupported github token values'
   },
   messages: {
-    invalidWorkingDirectory: 'Working directory not found: {{value}}',
-    workingDirectoryMustBeOfTypeString: 'Working directory must be of type string'
+    unsupportedGithubToken: 'Unsupported github token value: {{value}}'
   }
 };
-const allowedNonExistingWorkingDirectories = ['dist', '.tmp'];
-const isAllowedNonExistingWorkingDirectory = relativePath => {
-  for (const item of allowedNonExistingWorkingDirectories) {
-    if (relativePath.startsWith(item)) {
-      return true;
-    }
-  }
-  return false;
-};
 const create = context => {
   const sourceCode = getSourceCode(context);
   if (!sourceCode.parserServices?.isYAML) {
@@ -668,24 +769,12 @@ const create = context => {
   }
   return {
     YAMLPair(node) {
-      if (node && node.type === 'YAMLPair' && node.key && typeof node.key === 'object' && 'type' in node.key && node.key.type === 'YAMLScalar' && typeof node.key.value === 'string' && node.key.value === 'working-directory' && node.value && typeof node.value === 'object' && 'type' in node.value && node.value.type === 'YAMLScalar') {
+      if (node && node.type === 'YAMLPair' && node.key && typeof node.key === 'object' && 'type' in node.key && node.key.type === 'YAMLScalar' && typeof node.key.value === 'string' && node.key.value === 'GITHUB_TOKEN' && node.value && typeof node.value === 'object' && 'type' in node.value && node.value.type === 'YAMLScalar') {
         const nodeValue = node.value.value;
-        if (typeof nodeValue !== 'string') {
+        if (typeof nodeValue !== 'string' || nodeValue !== '${{ secrets.GITHUB_TOKEN }}') {
           context.report({
             node,
-            messageId: 'workingDirectoryMustBeOfTypeString',
-            data: {
-              value: nodeValue
-            }
-          });
-          return;
-        }
-        const path = resolve(context.cwd, nodeValue);
-        const relativePath = relative(context.cwd, path);
-        if (!isAllowedNonExistingWorkingDirectory(relativePath) && !existsSync(path)) {
-          context.report({
-            node,
-            messageId: 'invalidWorkingDirectory',
+            messageId: 'unsupportedGithubToken',
             data: {
               value: nodeValue
             }
@@ -696,7 +785,7 @@ const create = context => {
   };
 };
 
-const workingDirectory = {
+const githubToken = {
   __proto__: null,
   create,
   meta
@@ -711,9 +800,11 @@ const plugin = {
     'action-versions': actionVersions,
     'ci-versions': ciVersions,
     'fail-fast': failFast,
+    'github-token': githubToken,
     'max-parallel': maxParallel,
     'node-version-file': nodeVersionFile,
     'npm-registry': npmRegistry,
+    'python-version': pythonVersion,
     'timeout-minutes': timeoutMinutes,
     'working-directory': workingDirectory,
     matrix: matrix,
@@ -736,6 +827,7 @@ const recommended = [{
     'github-actions/action-versions': 'error',
     'github-actions/ci-versions': 'error',
     'github-actions/fail-fast': 'error',
+    'github-actions/github-token': 'error',
     'github-actions/matrix': 'off',
     'github-actions/max-parallel': 'error',
     'github-actions/needs': 'error',
@@ -744,6 +836,7 @@ const recommended = [{
     'github-actions/npm': 'error',
     'github-actions/on': 'error',
     'github-actions/permissions': 'off',
+    'github-actions/python-version': 'error',
     'github-actions/shell': 'error',
     'github-actions/timeout-minutes': 'error',
     'github-actions/working-directory': 'error'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lvce-editor/eslint-plugin-github-actions",
-  "version": "2.18.0",
+  "version": "2.20.0",
   "main": "dist/index.js",
   "type": "module",
   "keywords": [],