eslint-plugin-github-actions-2 1.0.0

package/dist/rules/no-inherit-secrets.js

@@ -0,0 +1,57 @@
+import { getMappingPair, getScalarStringValue, getWorkflowJobs, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
+/** Determine whether a job references a reusable workflow. */
+const isReusableWorkflowJob = (jobMapping) => getMappingPair(jobMapping, "uses") !== null;
+/** Determine whether a secrets pair uses the broad `inherit` shortcut. */
+const isInheritSecretsValue = (secretsPair) => getScalarStringValue(secretsPair.value)?.trim() === "inherit";
+/** Rule implementation for disallowing reusable-workflow `secrets: inherit`. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const job of getWorkflowJobs(root)) {
+                    if (!isReusableWorkflowJob(job.mapping)) {
+                        continue;
+                    }
+                    const secretsPair = getMappingPair(job.mapping, "secrets");
+                    if (secretsPair === null ||
+                        !isInheritSecretsValue(secretsPair)) {
+                        continue;
+                    }
+                    context.report({
+                        data: {
+                            jobId: job.id,
+                        },
+                        messageId: "inheritedSecrets",
+                        node: secretsPair.value,
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.security",
+                "github-actions.configs.strict",
+            ],
+            description: "disallow `secrets: inherit` on reusable-workflow jobs so callers pass only the named secrets each workflow actually needs.",
+            recommended: false,
+            requiresTypeChecking: false,
+            ruleId: "R026",
+            ruleNumber: 26,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-inherit-secrets",
+        },
+        messages: {
+            inheritedSecrets: "Job '{{jobId}}' uses `secrets: inherit`. Pass only the specific named secrets the called workflow requires.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-inherit-secrets.js.map

package/dist/rules/no-inherit-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-inherit-secrets.js","sourceRoot":"","sources":["../../src/rules/no-inherit-secrets.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,8DAA8D;AAC9D,MAAM,qBAAqB,GAAG,CAC1B,UAAqC,EAC9B,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;AAE1D,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG,CAC1B,WAAqE,EAC9D,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,SAAS,CAAC;AAE5E,gFAAgF;AAChF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;wBACtC,SAAS;oBACb,CAAC;oBAED,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBAE3D,IACI,WAAW,KAAK,IAAI;wBACpB,CAAC,qBAAqB,CAAC,WAAW,CAAC,EACrC,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,KAAK,EAAE,GAAG,CAAC,EAAE;yBAChB;wBACD,SAAS,EAAE,kBAAkB;wBAC7B,IAAI,EAAE,WAAW,CAAC,KAA6B;qBAClD,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,iCAAiC;gBACjC,+BAA+B;aAClC;YACD,WAAW,EACP,4HAA4H;YAChI,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,2FAA2F;SACnG;QACD,QAAQ,EAAE;YACN,gBAAgB,EACZ,6GAA6G;SACpH;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-invalid-concurrency-context.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow unavailable contexts inside workflow and job concurrency expressions.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for validating concurrency context usage. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-invalid-concurrency-context.d.ts.map

package/dist/rules/no-invalid-concurrency-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-invalid-concurrency-context.d.ts","sourceRoot":"","sources":["../../src/rules/no-invalid-concurrency-context.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAoJnC,oEAAoE;AACpE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAoEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-invalid-concurrency-context.js

@@ -0,0 +1,141 @@
+import { getGithubExpressionBodies, getReferencedContextRoots, } from "../_internal/github-expressions.js";
+import { getMappingPair, getScalarStringValue, getWorkflowJobs, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Allowed contexts for top-level workflow `concurrency`. */
+const allowedWorkflowConcurrencyContexts = new Set([
+    "github",
+    "inputs",
+    "vars",
+]);
+/** Allowed contexts for `jobs.<job_id>.concurrency`. */
+const allowedJobConcurrencyContexts = new Set([
+    "github",
+    "inputs",
+    "matrix",
+    "needs",
+    "strategy",
+    "vars",
+]);
+/** Determine whether a scalar contains any GitHub expressions. */
+const containsGithubExpression = (value) => getGithubExpressionBodies(value).length > 0;
+/** Collect disallowed context roots for the provided scalar value. */
+const getDisallowedContexts = (value, allowedContexts) => getReferencedContextRoots(value).filter((contextRoot) => !allowedContexts.has(contextRoot));
+/** Check a single concurrency scalar for unsupported context usage. */
+const reportInvalidContexts = (context, options) => {
+    if (!containsGithubExpression(options.value)) {
+        return;
+    }
+    const disallowedContexts = getDisallowedContexts(options.value, options.allowedContexts);
+    if (disallowedContexts.length === 0) {
+        return;
+    }
+    context.report({
+        data: {
+            contexts: disallowedContexts.join(", "),
+            field: options.field,
+            jobId: options.jobId,
+        },
+        messageId: options.messageId,
+        node: options.node,
+    });
+};
+/** Inspect a workflow-level or job-level concurrency declaration. */
+const inspectConcurrencyValue = (context, options) => {
+    const concurrencyValue = unwrapYamlValue(options.concurrencyNode);
+    if (concurrencyValue === null) {
+        return;
+    }
+    if (concurrencyValue.type === "YAMLScalar") {
+        const scalarValue = getScalarStringValue(concurrencyValue);
+        if (scalarValue === null || scalarValue.trim().length === 0) {
+            return;
+        }
+        reportInvalidContexts(context, {
+            allowedContexts: options.allowedContexts,
+            field: "concurrency",
+            jobId: options.jobId,
+            messageId: options.messageId,
+            node: concurrencyValue,
+            value: scalarValue,
+        });
+        return;
+    }
+    if (concurrencyValue.type !== "YAMLMapping") {
+        return;
+    }
+    for (const fieldName of ["group", "cancel-in-progress"]) {
+        const fieldPair = getMappingPair(concurrencyValue, fieldName);
+        if (fieldPair === null) {
+            continue;
+        }
+        const fieldValueNode = unwrapYamlValue(fieldPair.value);
+        const fieldValue = getScalarStringValue(fieldValueNode);
+        if (fieldValue === null || fieldValue.trim().length === 0) {
+            continue;
+        }
+        reportInvalidContexts(context, {
+            allowedContexts: options.allowedContexts,
+            field: `concurrency.${fieldName}`,
+            jobId: options.jobId,
+            messageId: options.messageId,
+            node: fieldValueNode ?? fieldPair,
+            value: fieldValue,
+        });
+    }
+};
+/** Rule implementation for validating concurrency context usage. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                const workflowConcurrencyPair = getMappingPair(root, "concurrency");
+                if (workflowConcurrencyPair !== null) {
+                    inspectConcurrencyValue(context, {
+                        allowedContexts: allowedWorkflowConcurrencyContexts,
+                        concurrencyNode: workflowConcurrencyPair.value,
+                        jobId: undefined,
+                        messageId: "invalidWorkflowConcurrencyContext",
+                    });
+                }
+                for (const job of getWorkflowJobs(root)) {
+                    const jobConcurrencyPair = getMappingPair(job.mapping, "concurrency");
+                    if (jobConcurrencyPair === null) {
+                        continue;
+                    }
+                    inspectConcurrencyValue(context, {
+                        allowedContexts: allowedJobConcurrencyContexts,
+                        concurrencyNode: jobConcurrencyPair.value,
+                        jobId: job.id,
+                        messageId: "invalidJobConcurrencyContext",
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.recommended",
+                "github-actions.configs.strict",
+            ],
+            description: "disallow unavailable contexts in workflow-level and job-level `concurrency` expressions.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R042",
+            ruleNumber: 42,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-invalid-concurrency-context",
+        },
+        messages: {
+            invalidJobConcurrencyContext: "Job '{{jobId}}' `{{field}}` references unsupported context access ({{contexts}}). Job-level concurrency may only reference `github`, `needs`, `strategy`, `matrix`, `inputs`, and `vars`.",
+            invalidWorkflowConcurrencyContext: "Workflow `{{field}}` references unsupported context access ({{contexts}}). Top-level concurrency may only reference `github`, `inputs`, and `vars`.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-invalid-concurrency-context.js.map

package/dist/rules/no-invalid-concurrency-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-invalid-concurrency-context.js","sourceRoot":"","sources":["../../src/rules/no-invalid-concurrency-context.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,yBAAyB,EACzB,yBAAyB,GAC5B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,6DAA6D;AAC7D,MAAM,kCAAkC,GAAwB,IAAI,GAAG,CAAC;IACpE,QAAQ;IACR,QAAQ;IACR,MAAM;CACT,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IAC/D,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,UAAU;IACV,MAAM;CACT,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,wBAAwB,GAAG,CAAC,KAAa,EAAW,EAAE,CACxD,yBAAyB,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAEhD,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,CAC1B,KAAa,EACb,eAAoC,EACnB,EAAE,CACnB,yBAAyB,CAAC,KAAK,CAAC,CAAC,MAAM,CACnC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CACrD,CAAC;AAEN,uEAAuE;AACvE,MAAM,qBAAqB,GAAG,CAC1B,OAAmC,EACnC,OASE,EACE,EAAE;IACN,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO;IACX,CAAC;IAED,MAAM,kBAAkB,GAAG,qBAAqB,CAC5C,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,eAAe,CAC1B,CAAC;IAEF,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO;IACX,CAAC;IAED,OAAO,CAAC,MAAM,CAAC;QACX,IAAI,EAAE;YACF,QAAQ,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YACvC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;SACvB;QACD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAiB;KAClC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,qEAAqE;AACrE,MAAM,uBAAuB,GAAG,CAC5B,OAAmC,EACnC,OAOE,EACE,EAAE;IACN,MAAM,gBAAgB,GAAG,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAElE,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO;IACX,CAAC;IAED,IAAI,gBAAgB,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAE3D,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,OAAO;QACX,CAAC;QAED,qBAAqB,CAAC,OAAO,EAAE;YAC3B,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QAEH,OAAO;IACX,CAAC;IAED,IAAI,gBAAgB,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAC1C,OAAO;IACX,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAU,EAAE,CAAC;QAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QAE9D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACrB,SAAS;QACb,CAAC;QAED,MAAM,cAAc,GAAG,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAExD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,SAAS;QACb,CAAC;QAED,qBAAqB,CAAC,OAAO,EAAE;YAC3B,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,KAAK,EAAE,eAAe,SAAS,EAAE;YACjC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,IAAI,EAAE,cAAc,IAAI,SAAS;YACjC,KAAK,EAAE,UAAU;SACpB,CAAC,CAAC;IACP,CAAC;AACL,CAAC,CAAC;AAEF,oEAAoE;AACpE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,uBAAuB,GAAG,cAAc,CAC1C,IAAI,EACJ,aAAa,CAChB,CAAC;gBAEF,IAAI,uBAAuB,KAAK,IAAI,EAAE,CAAC;oBACnC,uBAAuB,CAAC,OAAO,EAAE;wBAC7B,eAAe,EAAE,kCAAkC;wBACnD,eAAe,EAAE,uBAAuB,CAAC,KAAK;wBAC9C,KAAK,EAAE,SAAS;wBAChB,SAAS,EAAE,mCAAmC;qBACjD,CAAC,CAAC;gBACP,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,kBAAkB,GAAG,cAAc,CACrC,GAAG,CAAC,OAAO,EACX,aAAa,CAChB,CAAC;oBAEF,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;wBAC9B,SAAS;oBACb,CAAC;oBAED,uBAAuB,CAAC,OAAO,EAAE;wBAC7B,eAAe,EAAE,6BAA6B;wBAC9C,eAAe,EAAE,kBAAkB,CAAC,KAAK;wBACzC,KAAK,EAAE,GAAG,CAAC,EAAE;wBACb,SAAS,EAAE,8BAA8B;qBAC5C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,oCAAoC;gBACpC,+BAA+B;aAClC;YACD,WAAW,EACP,0FAA0F;YAC9F,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,uGAAuG;SAC/G;QACD,QAAQ,EAAE;YACN,4BAA4B,EACxB,2LAA2L;YAC/L,iCAAiC,EAC7B,qJAAqJ;SAC5J;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-invalid-key.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow invalid keys in GitHub Actions workflow mappings.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for validating workflow mapping keys. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-invalid-key.d.ts.map

package/dist/rules/no-invalid-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-invalid-key.d.ts","sourceRoot":"","sources":["../../src/rules/no-invalid-key.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AA6GnC,gEAAgE;AAChE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAuIhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-invalid-key.js

@@ -0,0 +1,152 @@
+import { getMappingValueAsMapping, getMappingValueAsSequence, getScalarStringValue, getWorkflowJobs, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Valid top-level workflow keys. */
+const VALID_TOP_LEVEL_KEYS = new Set([
+    "concurrency",
+    "defaults",
+    "env",
+    "jobs",
+    "name",
+    "on",
+    "permissions",
+    "run-name",
+]);
+/** Valid job-level keys under `jobs.<job_id>`. */
+const VALID_JOB_KEYS = new Set([
+    "concurrency",
+    "container",
+    "continue-on-error",
+    "defaults",
+    "env",
+    "environment",
+    "if",
+    "name",
+    "needs",
+    "outputs",
+    "permissions",
+    "runs-on",
+    "secrets",
+    "services",
+    "steps",
+    "strategy",
+    "timeout-minutes",
+    "uses",
+    "with",
+]);
+/** Valid strategy keys under `jobs.<job_id>.strategy`. */
+const VALID_STRATEGY_KEYS = new Set([
+    "fail-fast",
+    "matrix",
+    "max-parallel",
+]);
+/** Valid container and service keys. */
+const VALID_CONTAINER_OR_SERVICE_KEYS = new Set([
+    "credentials",
+    "env",
+    "image",
+    "options",
+    "ports",
+    "volumes",
+]);
+/** Valid step keys under `jobs.<job_id>.steps[]`. */
+const VALID_STEP_KEYS = new Set([
+    "continue-on-error",
+    "env",
+    "id",
+    "if",
+    "name",
+    "run",
+    "shell",
+    "timeout-minutes",
+    "uses",
+    "with",
+    "working-directory",
+]);
+/** Report invalid mapping keys for one workflow section. */
+const reportInvalidKeys = (context, mapping, validKeys, messageId) => {
+    for (const pair of mapping.pairs) {
+        const keyValue = getScalarStringValue(pair.key);
+        if (keyValue === null || validKeys.has(keyValue)) {
+            continue;
+        }
+        context.report({
+            data: {
+                key: keyValue,
+            },
+            messageId,
+            node: (pair.key ?? pair),
+        });
+    }
+};
+/** Rule implementation for validating workflow mapping keys. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                reportInvalidKeys(context, root, VALID_TOP_LEVEL_KEYS, "invalidTopLevelKey");
+                for (const job of getWorkflowJobs(root)) {
+                    reportInvalidKeys(context, job.mapping, VALID_JOB_KEYS, "invalidJobKey");
+                    const strategyMapping = getMappingValueAsMapping(job.mapping, "strategy");
+                    if (strategyMapping !== null) {
+                        reportInvalidKeys(context, strategyMapping, VALID_STRATEGY_KEYS, "invalidStrategyKey");
+                    }
+                    const containerMapping = getMappingValueAsMapping(job.mapping, "container");
+                    if (containerMapping !== null) {
+                        reportInvalidKeys(context, containerMapping, VALID_CONTAINER_OR_SERVICE_KEYS, "invalidContainerKey");
+                    }
+                    const servicesMapping = getMappingValueAsMapping(job.mapping, "services");
+                    if (servicesMapping !== null) {
+                        for (const servicePair of servicesMapping.pairs) {
+                            const serviceMapping = unwrapYamlValue(servicePair.value);
+                            if (serviceMapping?.type !== "YAMLMapping") {
+                                continue;
+                            }
+                            reportInvalidKeys(context, serviceMapping, VALID_CONTAINER_OR_SERVICE_KEYS, "invalidServiceKey");
+                        }
+                    }
+                    const stepsSequence = getMappingValueAsSequence(job.mapping, "steps");
+                    if (stepsSequence === null) {
+                        continue;
+                    }
+                    for (const step of stepsSequence.entries) {
+                        const stepMapping = unwrapYamlValue(step);
+                        if (stepMapping?.type !== "YAMLMapping") {
+                            continue;
+                        }
+                        reportInvalidKeys(context, stepMapping, VALID_STEP_KEYS, "invalidStepKey");
+                    }
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.recommended",
+                "github-actions.configs.strict",
+            ],
+            description: "disallow unsupported keys in common GitHub Actions workflow mappings.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R019",
+            ruleNumber: 19,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-invalid-key",
+        },
+        messages: {
+            invalidContainerKey: "`{{key}}` is not a valid key for a job `container` block.",
+            invalidJobKey: "`{{key}}` is not a valid key for a workflow job definition.",
+            invalidServiceKey: "`{{key}}` is not a valid key for a job `services` entry.",
+            invalidStepKey: "`{{key}}` is not a valid key for a workflow step.",
+            invalidStrategyKey: "`{{key}}` is not a valid key for a job `strategy` block.",
+            invalidTopLevelKey: "`{{key}}` is not a valid top-level workflow key.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-invalid-key.js.map

package/dist/rules/no-invalid-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-invalid-key.js","sourceRoot":"","sources":["../../src/rules/no-invalid-key.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,qCAAqC;AACrC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS;IACzC,aAAa;IACb,UAAU;IACV,KAAK;IACL,MAAM;IACN,MAAM;IACN,IAAI;IACJ,aAAa;IACb,UAAU;CACb,CAAC,CAAC;AAEH,kDAAkD;AAClD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS;IACnC,aAAa;IACb,WAAW;IACX,mBAAmB;IACnB,UAAU;IACV,KAAK;IACL,aAAa;IACb,IAAI;IACJ,MAAM;IACN,OAAO;IACP,SAAS;IACT,aAAa;IACb,SAAS;IACT,SAAS;IACT,UAAU;IACV,OAAO;IACP,UAAU;IACV,iBAAiB;IACjB,MAAM;IACN,MAAM;CACT,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS;IACxC,WAAW;IACX,QAAQ;IACR,cAAc;CACjB,CAAC,CAAC;AAEH,wCAAwC;AACxC,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAS;IACpD,aAAa;IACb,KAAK;IACL,OAAO;IACP,SAAS;IACT,OAAO;IACP,SAAS;CACZ,CAAC,CAAC;AAEH,qDAAqD;AACrD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IACpC,mBAAmB;IACnB,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,KAAK;IACL,OAAO;IACP,iBAAiB;IACjB,MAAM;IACN,MAAM;IACN,mBAAmB;CACtB,CAAC,CAAC;AAEH,4DAA4D;AAC5D,MAAM,iBAAiB,GAAG,CACtB,OAAmC,EACnC,OAAkC,EAClC,SAA8B,EAC9B,SAM0B,EACtB,EAAE;IACN,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEhD,IAAI,QAAQ,KAAK,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,SAAS;QACb,CAAC;QAED,OAAO,CAAC,MAAM,CAAC;YACX,IAAI,EAAE;gBACF,GAAG,EAAE,QAAQ;aAChB;YACD,SAAS;YACT,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAyB;SACnD,CAAC,CAAC;IACP,CAAC;AACL,CAAC,CAAC;AAEF,gEAAgE;AAChE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,iBAAiB,CACb,OAAO,EACP,IAAI,EACJ,oBAAoB,EACpB,oBAAoB,CACvB,CAAC;gBAEF,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,iBAAiB,CACb,OAAO,EACP,GAAG,CAAC,OAAO,EACX,cAAc,EACd,eAAe,CAClB,CAAC;oBAEF,MAAM,eAAe,GAAG,wBAAwB,CAC5C,GAAG,CAAC,OAAO,EACX,UAAU,CACb,CAAC;oBAEF,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;wBAC3B,iBAAiB,CACb,OAAO,EACP,eAAe,EACf,mBAAmB,EACnB,oBAAoB,CACvB,CAAC;oBACN,CAAC;oBAED,MAAM,gBAAgB,GAAG,wBAAwB,CAC7C,GAAG,CAAC,OAAO,EACX,WAAW,CACd,CAAC;oBAEF,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;wBAC5B,iBAAiB,CACb,OAAO,EACP,gBAAgB,EAChB,+BAA+B,EAC/B,qBAAqB,CACxB,CAAC;oBACN,CAAC;oBAED,MAAM,eAAe,GAAG,wBAAwB,CAC5C,GAAG,CAAC,OAAO,EACX,UAAU,CACb,CAAC;oBAEF,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;wBAC3B,KAAK,MAAM,WAAW,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;4BAC9C,MAAM,cAAc,GAAG,eAAe,CAClC,WAAW,CAAC,KAAK,CACpB,CAAC;4BAEF,IAAI,cAAc,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;gCACzC,SAAS;4BACb,CAAC;4BAED,iBAAiB,CACb,OAAO,EACP,cAAc,EACd,+BAA+B,EAC/B,mBAAmB,CACtB,CAAC;wBACN,CAAC;oBACL,CAAC;oBAED,MAAM,aAAa,GAAG,yBAAyB,CAC3C,GAAG,CAAC,OAAO,EACX,OAAO,CACV,CAAC;oBAEF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;wBACzB,SAAS;oBACb,CAAC;oBAED,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;wBACvC,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;wBAE1C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;4BACtC,SAAS;wBACb,CAAC;wBAED,iBAAiB,CACb,OAAO,EACP,WAAW,EACX,eAAe,EACf,gBAAgB,CACnB,CAAC;oBACN,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,oCAAoC;gBACpC,+BAA+B;aAClC;YACD,WAAW,EACP,uEAAuE;YAC3E,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,uFAAuF;SAC/F;QACD,QAAQ,EAAE;YACN,mBAAmB,EACf,2DAA2D;YAC/D,aAAa,EACT,6DAA6D;YACjE,iBAAiB,EACb,0DAA0D;YAC9D,cAAc,EAAE,mDAAmD;YACnE,kBAAkB,EACd,0DAA0D;YAC9D,kBAAkB,EACd,kDAAkD;SACzD;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-invalid-reusable-workflow-job-key.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow unsupported keys on jobs that call reusable workflows.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for validating reusable-workflow caller job keys. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-invalid-reusable-workflow-job-key.d.ts.map

package/dist/rules/no-invalid-reusable-workflow-job-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-invalid-reusable-workflow-job-key.d.ts","sourceRoot":"","sources":["../../src/rules/no-invalid-reusable-workflow-job-key.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAiCnC,4EAA4E;AAC5E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA6DhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-invalid-reusable-workflow-job-key.js

@@ -0,0 +1,73 @@
+import { getMappingPair, getScalarStringValue, getWorkflowJobs, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
+/** Supported keywords for jobs that call reusable workflows via `uses`. */
+const reusableWorkflowJobKeys = [
+    "name",
+    "uses",
+    "with",
+    "secrets",
+    "strategy",
+    "needs",
+    "if",
+    "concurrency",
+    "permissions",
+];
+/** Constant-time lookup for supported reusable-workflow caller job keys. */
+const reusableWorkflowJobKeySet = new Set(reusableWorkflowJobKeys);
+/** Determine whether a job calls a reusable workflow. */
+const isReusableWorkflowJob = (jobMapping) => getMappingPair(jobMapping, "uses") !== null;
+/** Rule implementation for validating reusable-workflow caller job keys. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const job of getWorkflowJobs(root)) {
+                    if (!isReusableWorkflowJob(job.mapping)) {
+                        continue;
+                    }
+                    for (const pair of job.mapping.pairs) {
+                        const key = getScalarStringValue(pair.key);
+                        if (key === null ||
+                            reusableWorkflowJobKeySet.has(key)) {
+                            continue;
+                        }
+                        context.report({
+                            data: {
+                                allowedKeys: reusableWorkflowJobKeys.join(", "),
+                                jobId: job.id,
+                                key,
+                            },
+                            messageId: "invalidReusableWorkflowJobKey",
+                            node: pair.key,
+                        });
+                    }
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.recommended",
+                "github-actions.configs.strict",
+            ],
+            description: "disallow unsupported keys on jobs that call reusable workflows via `jobs.<job_id>.uses`.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R041",
+            ruleNumber: 41,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-invalid-reusable-workflow-job-key",
+        },
+        messages: {
+            invalidReusableWorkflowJobKey: "Job '{{jobId}}' calls a reusable workflow via `uses`, so `{{key}}` is not supported here. Caller jobs may only use: {{allowedKeys}}.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-invalid-reusable-workflow-job-key.js.map

package/dist/rules/no-invalid-reusable-workflow-job-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-invalid-reusable-workflow-job-key.js","sourceRoot":"","sources":["../../src/rules/no-invalid-reusable-workflow-job-key.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,2EAA2E;AAC3E,MAAM,uBAAuB,GAAG;IAC5B,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,UAAU;IACV,OAAO;IACP,IAAI;IACJ,aAAa;IACb,aAAa;CACP,CAAC;AAEX,4EAA4E;AAC5E,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAC1D,uBAAuB,CAC1B,CAAC;AAEF,yDAAyD;AACzD,MAAM,qBAAqB,GAAG,CAC1B,UAAqC,EAC9B,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;AAE1D,4EAA4E;AAC5E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;wBACtC,SAAS;oBACb,CAAC;oBAED,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;wBACnC,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAE3C,IACI,GAAG,KAAK,IAAI;4BACZ,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,EACpC,CAAC;4BACC,SAAS;wBACb,CAAC;wBAED,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,WAAW,EAAE,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;gCAC/C,KAAK,EAAE,GAAG,CAAC,EAAE;gCACb,GAAG;6BACN;4BACD,SAAS,EAAE,+BAA+B;4BAC1C,IAAI,EAAE,IAAI,CAAC,GAA2B;yBACzC,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,oCAAoC;gBACpC,+BAA+B;aAClC;YACD,WAAW,EACP,0FAA0F;YAC9F,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,6GAA6G;SACrH;QACD,QAAQ,EAAE;YACN,6BAA6B,EACzB,sIAAsI;SAC7I;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-invalid-template-file-pattern-regex.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow invalid regular expressions in workflow-template `filePatterns`.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for validating `filePatterns` regex syntax. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-invalid-template-file-pattern-regex.d.ts.map

package/dist/rules/no-invalid-template-file-pattern-regex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-invalid-template-file-pattern-regex.d.ts","sourceRoot":"","sources":["../../src/rules/no-invalid-template-file-pattern-regex.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAanC,sEAAsE;AACtE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAuDhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-invalid-template-file-pattern-regex.js

@@ -0,0 +1,58 @@
+import { isWorkflowTemplatePropertiesFile } from "../_internal/lint-targets.js";
+import { getWorkflowTemplateFilePatternEntries, getWorkflowTemplatePropertiesRoot, } from "../_internal/workflow-template-properties.js";
+/** Construct a unicode regex from a pattern string. */
+const createUnicodeRegex = (pattern) => 
+// eslint-disable-next-line security/detect-non-literal-regexp -- Intentional syntax validation of user-provided regex patterns.
+new RegExp(pattern, "u");
+/** Rule implementation for validating `filePatterns` regex syntax. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                if (!isWorkflowTemplatePropertiesFile(context.filename)) {
+                    return;
+                }
+                const root = getWorkflowTemplatePropertiesRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const { node, value, } of getWorkflowTemplateFilePatternEntries(root)) {
+                    try {
+                        createUnicodeRegex(value);
+                    }
+                    catch {
+                        context.report({
+                            data: {
+                                pattern: value,
+                            },
+                            messageId: "invalidTemplateFilePatternRegex",
+                            node: node,
+                        });
+                    }
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.workflowTemplateProperties",
+                "github-actions.configs.workflowTemplates",
+                "github-actions.configs.all",
+            ],
+            description: "disallow syntactically invalid regexes in workflow-template `filePatterns`.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R059",
+            ruleNumber: 59,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-invalid-template-file-pattern-regex",
+        },
+        messages: {
+            invalidTemplateFilePatternRegex: "Template `filePatterns` entry '{{pattern}}' is not a valid regular expression.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-invalid-template-file-pattern-regex.js.map

package/dist/rules/no-invalid-template-file-pattern-regex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-invalid-template-file-pattern-regex.js","sourceRoot":"","sources":["../../src/rules/no-invalid-template-file-pattern-regex.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EACH,qCAAqC,EACrC,iCAAiC,GACpC,MAAM,8CAA8C,CAAC;AAEtD,uDAAuD;AACvD,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAU,EAAE;AACnD,gIAAgI;AAChI,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAE7B,sEAAsE;AACtE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtD,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;gBAExD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,EACP,IAAI,EACJ,KAAK,GACR,IAAI,qCAAqC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/C,IAAI,CAAC;wBACD,kBAAkB,CAAC,KAAK,CAAC,CAAC;oBAC9B,CAAC;oBAAC,MAAM,CAAC;wBACL,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,OAAO,EAAE,KAAK;6BACjB;4BACD,SAAS,EAAE,iCAAiC;4BAC5C,IAAI,EAAE,IAA4B;yBACrC,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,mDAAmD;gBACnD,0CAA0C;gBAC1C,4BAA4B;aAC/B;YACD,WAAW,EACP,6EAA6E;YACjF,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,+GAA+G;SACvH;QACD,QAAQ,EAAE;YACN,+BAA+B,EAC3B,gFAAgF;SACvF;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-invalid-workflow-call-output-value.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow invalid reusable workflow output values.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for validating reusable workflow output values. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-invalid-workflow-call-output-value.d.ts.map

package/dist/rules/no-invalid-workflow-call-output-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-invalid-workflow-call-output-value.d.ts","sourceRoot":"","sources":["../../src/rules/no-invalid-workflow-call-output-value.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAgCnC,0EAA0E;AAC1E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAoHhB,CAAC;AAEF,eAAe,IAAI,CAAC"}