@stripe/extensibility-eslint-plugin 0.15.4 → 0.15.6

package/README.md

@@ -0,0 +1,34 @@
+# @stripe/extensibility-eslint-plugin
+
+ESLint plugin and flat config for Stripe Apps development. Includes security checks, code quality rules, and FormSpec type-safety rules.
+
+## Installation
+
+```bash
+npm install --save-dev @stripe/extensibility-eslint-plugin
+```
+
+Requires `eslint ^9.0.0` and `typescript ^5.8.0` as peer dependencies. The default config uses `@typescript-eslint` rules, so you also need `typescript-eslint` installed:
+
+```bash
+npm install --save-dev eslint typescript typescript-eslint
+```
+
+## Usage
+
+Add the default config to your `eslint.config.mjs`:
+
+```javascript
+import stripeAppsConfig from '@stripe/extensibility-eslint-plugin';
+
+export default [
+  ...stripeAppsConfig,
+  // Your custom rules here
+];
+```
+
+## Exported configs
+
+| Export                         | Description                                        |
+| ------------------------------ | -------------------------------------------------- |
+| `default` / `stripeAppsConfig` | Full flat config with recommended + FormSpec rules |

package/dist/api-surface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-surface.d.ts","sourceRoot":"","sources":["../src/api-surface.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,aAAa,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,iCAAiC,MAAM,mDAAmD,CAAC;AACvG,OAAO,KAAK,8BAA8B,MAAM,gDAAgD,CAAC;AACjG,OAAO,KAAK,+BAA+B,MAAM,iDAAiD,CAAC;AACnG,OAAO,KAAK,iBAAiB,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,mCAAmC,MAAM,sDAAsD,CAAC;AAC5G,OAAO,KAAK,yBAAyB,MAAM,2CAA2C,CAAC;AACvF,OAAO,KAAK,0BAA0B,MAAM,4CAA4C,CAAC;AACzF,OAAO,KAAK,2BAA2B,MAAM,6CAA6C,CAAC;AAE3F,cAAc,YAAY,CAAC;AAE3B,cAAc;AACd,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB,cAAc;AACd,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAE7C,cAAc;AACd,OAAO,EAAE,8BAA8B,EAAE,CAAC;AAE1C,cAAc;AACd,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAE3C,cAAc;AACd,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAE7B,cAAc;AACd,OAAO,EAAE,mCAAmC,EAAE,CAAC;AAE/C,cAAc;AACd,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAErC,cAAc;AACd,OAAO,EAAE,0BAA0B,EAAE,CAAC;AAEtC,cAAc;AACd,OAAO,EAAE,2BAA2B,EAAE,CAAC"}

package/dist/configs/async-with-egress.cjs

@@ -7559,6 +7559,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8180,6 +8190,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/async-with-egress.js

@@ -7525,6 +7525,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8146,6 +8156,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/billing.bill.discount_calculation.cjs

@@ -7569,6 +7569,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8190,6 +8200,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/billing.bill.discount_calculation.js

@@ -7535,6 +7535,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8156,6 +8166,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/billing.customer_balance_application.cjs

@@ -7569,6 +7569,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8190,6 +8200,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/billing.customer_balance_application.js

@@ -7535,6 +7535,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8156,6 +8166,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/billing.invoice_collection_setting.cjs

@@ -7569,6 +7569,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8190,6 +8200,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/billing.invoice_collection_setting.js

@@ -7535,6 +7535,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8156,6 +8166,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/billing.prorations.cjs

@@ -7569,6 +7569,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8190,6 +8200,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/billing.prorations.js

@@ -7535,6 +7535,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8156,6 +8166,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/billing.recurring_billing_item_handling.cjs

@@ -7569,6 +7569,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8190,6 +8200,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/billing.recurring_billing_item_handling.js

@@ -7535,6 +7535,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8156,6 +8166,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/core.workflows.custom_action.cjs

@@ -7569,6 +7569,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8190,6 +8200,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/core.workflows.custom_action.js

@@ -7535,6 +7535,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8156,6 +8166,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/custom-objects.cjs

@@ -7559,6 +7559,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8180,6 +8190,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/custom-objects.js

@@ -7525,6 +7525,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8146,6 +8156,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/extend.objects.custom_objects.cjs

@@ -7569,6 +7569,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8190,6 +8200,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/extend.objects.custom_objects.js

@@ -7535,6 +7535,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8156,6 +8166,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/extend.workflows.custom_action.cjs

@@ -7569,6 +7569,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8190,6 +8200,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/extend.workflows.custom_action.js

@@ -7535,6 +7535,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8156,6 +8166,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/runtime-core.cjs

@@ -7559,6 +7559,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8180,6 +8190,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/runtime-core.js

@@ -7525,6 +7525,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8146,6 +8156,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/sync-no-egress.cjs

@@ -7559,6 +7559,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8180,6 +8190,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {

package/dist/configs/sync-no-egress.js

@@ -7525,6 +7525,16 @@ var originalRule = noSecrets.rules["no-secrets"];
 if (!originalRule) {
   throw new Error("Expected rule 'no-secrets' not found in eslint-plugin-no-secrets");
 }
+var noSecretsOptions = {
+  tolerance: 5,
+  // High enough to avoid false-positives on normal identifiers.
+  ignoreModules: true,
+  additionalRegexes: {
+    "Stripe Secret Key": "sk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Restricted Key": "rk_(live|test)_[a-zA-Z0-9]{20,}",
+    "Stripe Webhook Secret": "whsec_[a-zA-Z0-9+/=]{20,}"
+  }
+};
 var rule = {
   ...originalRule,
   meta: {
@@ -8146,6 +8156,7 @@ var _requiredRules = {
   "no-unmodified-loop-condition": "warn",
   "no-constant-condition": "warn",
   "for-direction": "warn",
+  [`${_PLUGIN_NAME}/no-secrets`]: ["error", noSecretsOptions],
   [`${_PLUGIN_NAME}/valid-extension-interface`]: "warn"
 };
 var _recommendedRules = {