eslint-plugin-github-actions-2 1.0.0

package/dist/rules/require-job-name.js

@@ -0,0 +1,70 @@
+import { getMappingPair, getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Rule implementation for requiring explicit job names. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                const jobsMapping = getMappingValueAsMapping(root, "jobs");
+                if (jobsMapping === null) {
+                    return;
+                }
+                for (const pair of jobsMapping.pairs) {
+                    const jobId = getScalarStringValue(pair.key) ?? "<unknown>";
+                    const jobValue = unwrapYamlValue(pair.value);
+                    if (jobValue?.type !== "YAMLMapping") {
+                        context.report({
+                            data: { jobId },
+                            messageId: "missingJobName",
+                            node: (pair.value ?? pair),
+                        });
+                        continue;
+                    }
+                    const namePair = getMappingPair(jobValue, "name");
+                    if (namePair === null) {
+                        context.report({
+                            data: { jobId },
+                            messageId: "missingJobName",
+                            node: pair.key,
+                        });
+                        continue;
+                    }
+                    const nameValue = getScalarStringValue(namePair.value);
+                    if (nameValue === null || nameValue.trim().length === 0) {
+                        context.report({
+                            data: { jobId },
+                            messageId: "invalidJobName",
+                            node: (namePair.value ??
+                                namePair),
+                        });
+                    }
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.strict",
+            ],
+            description: "require every workflow job to declare a non-empty string `name` for readable run summaries.",
+            recommended: false,
+            requiresTypeChecking: false,
+            ruleId: "R007",
+            ruleNumber: 7,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-job-name",
+        },
+        messages: {
+            invalidJobName: "Job '{{jobId}}' must set `name` to a non-empty string.",
+            missingJobName: "Job '{{jobId}}' is missing a human-readable `name`.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-job-name.js.map

package/dist/rules/require-job-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-job-name.js","sourceRoot":"","sources":["../../src/rules/require-job-name.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,4DAA4D;AAC5D,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAE3D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;oBACvB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;oBAC5D,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAE7C,IAAI,QAAQ,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;wBACnC,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE,EAAE,KAAK,EAAE;4BACf,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAyB;yBACrD,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAElD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;wBACpB,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE,EAAE,KAAK,EAAE;4BACf,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,IAAI,CAAC,GAA2C;yBACzD,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBAEvD,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACtD,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE,EAAE,KAAK,EAAE;4BACf,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK;gCACjB,QAAQ,CAAyB;yBACxC,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,6FAA6F;YACjG,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,CAAC;YACb,GAAG,EAAE,yFAAyF;SACjG;QACD,QAAQ,EAAE;YACN,cAAc,EACV,wDAAwD;YAC5D,cAAc,EACV,qDAAqD;SAC5D;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-job-step-name.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require every workflow step to declare a string name.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring explicit job step names. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-job-step-name.d.ts.map

package/dist/rules/require-job-step-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-job-step-name.d.ts","sourceRoot":"","sources":["../../src/rules/require-job-step-name.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAWnC,iEAAiE;AACjE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAoFhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-job-step-name.js

@@ -0,0 +1,71 @@
+import { getMappingPair, getMappingValueAsSequence, getScalarStringValue, getWorkflowJobs, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Rule implementation for requiring explicit job step names. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const job of getWorkflowJobs(root)) {
+                    const stepsSequence = getMappingValueAsSequence(job.mapping, "steps");
+                    if (stepsSequence === null) {
+                        continue;
+                    }
+                    for (const entry of stepsSequence.entries) {
+                        const stepMapping = unwrapYamlValue(entry);
+                        if (stepMapping?.type !== "YAMLMapping") {
+                            continue;
+                        }
+                        const namePair = getMappingPair(stepMapping, "name");
+                        if (namePair === null) {
+                            context.report({
+                                data: {
+                                    jobId: job.id,
+                                },
+                                messageId: "missingStepName",
+                                node: stepMapping,
+                            });
+                            continue;
+                        }
+                        const nameValue = getScalarStringValue(namePair.value);
+                        if (nameValue === null ||
+                            nameValue.trim().length === 0) {
+                            context.report({
+                                data: {
+                                    jobId: job.id,
+                                },
+                                messageId: "invalidStepName",
+                                node: (namePair.value ??
+                                    namePair),
+                            });
+                        }
+                    }
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.strict",
+            ],
+            description: "require every workflow step to declare a non-empty string `name` so job logs remain readable.",
+            recommended: false,
+            requiresTypeChecking: false,
+            ruleId: "R008",
+            ruleNumber: 8,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-job-step-name",
+        },
+        messages: {
+            invalidStepName: "A step in job '{{jobId}}' must set `name` to a non-empty string.",
+            missingStepName: "A step in job '{{jobId}}' is missing a human-readable `name`.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-job-step-name.js.map

package/dist/rules/require-job-step-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-job-step-name.js","sourceRoot":"","sources":["../../src/rules/require-job-step-name.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,cAAc,EACd,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,iEAAiE;AACjE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,aAAa,GAAG,yBAAyB,CAC3C,GAAG,CAAC,OAAO,EACX,OAAO,CACV,CAAC;oBAEF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;wBACzB,SAAS;oBACb,CAAC;oBAED,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;wBACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;wBAE3C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;4BACtC,SAAS;wBACb,CAAC;wBAED,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;wBAErD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;4BACpB,OAAO,CAAC,MAAM,CAAC;gCACX,IAAI,EAAE;oCACF,KAAK,EAAE,GAAG,CAAC,EAAE;iCAChB;gCACD,SAAS,EAAE,iBAAiB;gCAC5B,IAAI,EAAE,WAAmC;6BAC5C,CAAC,CAAC;4BAEH,SAAS;wBACb,CAAC;wBAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;wBAEvD,IACI,SAAS,KAAK,IAAI;4BAClB,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAC/B,CAAC;4BACC,OAAO,CAAC,MAAM,CAAC;gCACX,IAAI,EAAE;oCACF,KAAK,EAAE,GAAG,CAAC,EAAE;iCAChB;gCACD,SAAS,EAAE,iBAAiB;gCAC5B,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK;oCACjB,QAAQ,CAAyB;6BACxC,CAAC,CAAC;wBACP,CAAC;oBACL,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,+FAA+F;YACnG,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,CAAC;YACb,GAAG,EAAE,8FAA8F;SACtG;QACD,QAAQ,EAAE;YACN,eAAe,EACX,kEAAkE;YACtE,eAAe,EACX,+DAA+D;SACtE;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-job-timeout-minutes.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require bounded job timeouts for GitHub Actions jobs.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring bounded timeout-minutes on workflow jobs. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-job-timeout-minutes.d.ts.map

package/dist/rules/require-job-timeout-minutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-job-timeout-minutes.d.ts","sourceRoot":"","sources":["../../src/rules/require-job-timeout-minutes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAoBnC,kFAAkF;AAClF,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAoHhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-job-timeout-minutes.js

@@ -0,0 +1,99 @@
+import { getMappingPair, getScalarNumberValue, getWorkflowJobs, getWorkflowRoot, isGithubExpressionScalar, } from "../_internal/workflow-yaml.js";
+/** Default upper bound used when validating workflow job timeouts. */
+const DEFAULT_MAX_MINUTES = 60;
+/** Rule implementation for requiring bounded timeout-minutes on workflow jobs. */
+const rule = {
+    create(context) {
+        const [options] = context.options;
+        const maxMinutes = options?.maxMinutes ?? DEFAULT_MAX_MINUTES;
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const job of getWorkflowJobs(root)) {
+                    if (getMappingPair(job.mapping, "uses") !== null) {
+                        continue;
+                    }
+                    const timeoutPair = getMappingPair(job.mapping, "timeout-minutes");
+                    if (timeoutPair === null) {
+                        context.report({
+                            data: {
+                                jobId: job.id,
+                            },
+                            messageId: "missingTimeout",
+                            node: job.idNode,
+                        });
+                        continue;
+                    }
+                    if (isGithubExpressionScalar(timeoutPair.value)) {
+                        continue;
+                    }
+                    const timeoutMinutes = getScalarNumberValue(timeoutPair.value);
+                    if (timeoutMinutes === null ||
+                        !Number.isInteger(timeoutMinutes) ||
+                        timeoutMinutes <= 0) {
+                        context.report({
+                            data: {
+                                jobId: job.id,
+                            },
+                            messageId: "invalidTimeout",
+                            node: timeoutPair.value ?? timeoutPair,
+                        });
+                        continue;
+                    }
+                    if (timeoutMinutes > maxMinutes) {
+                        context.report({
+                            data: {
+                                actualMinutes: String(timeoutMinutes),
+                                jobId: job.id,
+                                maxMinutes: String(maxMinutes),
+                            },
+                            messageId: "timeoutTooLarge",
+                            node: timeoutPair.value ?? timeoutPair,
+                        });
+                    }
+                }
+            },
+        };
+    },
+    meta: {
+        defaultOptions: [{}],
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.recommended",
+                "github-actions.configs.strict",
+            ],
+            description: "require every non-reusable workflow job to define a bounded `timeout-minutes` value.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R002",
+            ruleNumber: 2,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-job-timeout-minutes",
+        },
+        messages: {
+            invalidTimeout: "Job '{{jobId}}' has an invalid `timeout-minutes` value. Use a positive integer or a GitHub expression.",
+            missingTimeout: "Job '{{jobId}}' is missing `timeout-minutes`. Add an explicit timeout to prevent hung runners from waiting indefinitely.",
+            timeoutTooLarge: "Job '{{jobId}}' sets `timeout-minutes` to {{actualMinutes}}, which exceeds the configured maximum of {{maxMinutes}}.",
+        },
+        schema: [
+            {
+                additionalProperties: false,
+                description: "Optional configuration for the maximum allowed job timeout in minutes.",
+                properties: {
+                    maxMinutes: {
+                        description: "Maximum allowed timeout-minutes value for a non-reusable workflow job.",
+                        minimum: 1,
+                        type: "integer",
+                    },
+                },
+                type: "object",
+            },
+        ],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-job-timeout-minutes.js.map

package/dist/rules/require-job-timeout-minutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-job-timeout-minutes.js","sourceRoot":"","sources":["../../src/rules/require-job-timeout-minutes.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,wBAAwB,GAC3B,MAAM,+BAA+B,CAAC;AASvC,sEAAsE;AACtE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,kFAAkF;AAClF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAA0C,CAAC;QACrE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,mBAAmB,CAAC;QAE9D,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;wBAC/C,SAAS;oBACb,CAAC;oBAED,MAAM,WAAW,GAAG,cAAc,CAC9B,GAAG,CAAC,OAAO,EACX,iBAAiB,CACpB,CAAC;oBAEF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;wBACvB,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,KAAK,EAAE,GAAG,CAAC,EAAE;6BAChB;4BACD,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,GAAG,CAAC,MAAM;yBACnB,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,IAAI,wBAAwB,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC9C,SAAS;oBACb,CAAC;oBAED,MAAM,cAAc,GAAG,oBAAoB,CACvC,WAAW,CAAC,KAAK,CACpB,CAAC;oBAEF,IACI,cAAc,KAAK,IAAI;wBACvB,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC;wBACjC,cAAc,IAAI,CAAC,EACrB,CAAC;wBACC,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,KAAK,EAAE,GAAG,CAAC,EAAE;6BAChB;4BACD,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,WAAW,CAAC,KAAK,IAAI,WAAW;yBACzC,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,IAAI,cAAc,GAAG,UAAU,EAAE,CAAC;wBAC9B,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,aAAa,EAAE,MAAM,CAAC,cAAc,CAAC;gCACrC,KAAK,EAAE,GAAG,CAAC,EAAE;gCACb,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;6BACjC;4BACD,SAAS,EAAE,iBAAiB;4BAC5B,IAAI,EAAE,WAAW,CAAC,KAAK,IAAI,WAAW;yBACzC,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,cAAc,EAAE,CAAC,EAAE,CAAC;QACpB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,oCAAoC;gBACpC,+BAA+B;aAClC;YACD,WAAW,EACP,sFAAsF;YAC1F,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,CAAC;YACb,GAAG,EAAE,oGAAoG;SAC5G;QACD,QAAQ,EAAE;YACN,cAAc,EACV,wGAAwG;YAC5G,cAAc,EACV,0HAA0H;YAC9H,eAAe,EACX,sHAAsH;SAC7H;QACD,MAAM,EAAE;YACJ;gBACI,oBAAoB,EAAE,KAAK;gBAC3B,WAAW,EACP,wEAAwE;gBAC5E,UAAU,EAAE;oBACR,UAAU,EAAE;wBACR,WAAW,EACP,wEAAwE;wBAC5E,OAAO,EAAE,CAAC;wBACV,IAAI,EAAE,SAAS;qBAClB;iBACJ;gBACD,IAAI,EAAE,QAAQ;aACjB;SACJ;QACD,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-merge-group-trigger.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require merge-queue-aware workflows to listen for merge_group.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring merge_group triggers. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-merge-group-trigger.d.ts.map

package/dist/rules/require-merge-group-trigger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-merge-group-trigger.d.ts","sourceRoot":"","sources":["../../src/rules/require-merge-group-trigger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAwCnC,8DAA8D;AAC9D,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAiDhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-merge-group-trigger.js

@@ -0,0 +1,65 @@
+import { getMappingPair, getScalarStringValue, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Determine whether the workflow declares a specific trigger event. */
+const hasTriggerEvent = (root, eventName) => {
+    const onPair = getMappingPair(root, "on");
+    const onValue = unwrapYamlValue(onPair?.value ?? null);
+    if (onValue === null) {
+        return false;
+    }
+    if (onValue.type === "YAMLScalar") {
+        return getScalarStringValue(onValue) === eventName;
+    }
+    if (onValue.type === "YAMLSequence") {
+        return onValue.entries.some((entry) => entry !== null && getScalarStringValue(entry) === eventName);
+    }
+    if (onValue.type !== "YAMLMapping") {
+        return false;
+    }
+    return getMappingPair(onValue, eventName) !== null;
+};
+/** Rule implementation for requiring merge_group triggers. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null || !hasTriggerEvent(root, "pull_request")) {
+                    return;
+                }
+                if (hasTriggerEvent(root, "merge_group")) {
+                    return;
+                }
+                const onPair = getMappingPair(root, "on");
+                const onValue = unwrapYamlValue(onPair?.value ?? null);
+                if (onValue === null) {
+                    return;
+                }
+                context.report({
+                    messageId: "missingMergeGroup",
+                    node: onValue,
+                });
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.strict",
+            ],
+            description: "require pull-request validation workflows to include the `merge_group` trigger so required checks also run for merge queues.",
+            recommended: false,
+            requiresTypeChecking: false,
+            ruleId: "R035",
+            ruleNumber: 35,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-merge-group-trigger",
+        },
+        messages: {
+            missingMergeGroup: "Workflows that validate pull requests should also listen to `merge_group` so required status checks are reported when pull requests enter a merge queue.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-merge-group-trigger.js.map

package/dist/rules/require-merge-group-trigger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-merge-group-trigger.js","sourceRoot":"","sources":["../../src/rules/require-merge-group-trigger.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,wEAAwE;AACxE,MAAM,eAAe,GAAG,CACpB,IAA+B,EAC/B,SAAiB,EACV,EAAE;IACT,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;IAEvD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChC,OAAO,oBAAoB,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;IACvD,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CACvB,CAAC,KAAK,EAAE,EAAE,CACN,KAAK,KAAK,IAAI,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,SAAS,CAClE,CAAC;IACN,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC;AACvD,CAAC,CAAC;AAEF,8DAA8D;AAC9D,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;oBAC1D,OAAO;gBACX,CAAC;gBAED,IAAI,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;oBACvC,OAAO;gBACX,CAAC;gBAED,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;gBAEvD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACnB,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,mBAAmB;oBAC9B,IAAI,EAAE,OAA+B;iBACxC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,8HAA8H;YAClI,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,oGAAoG;SAC5G;QACD,QAAQ,EAAE;YACN,iBAAiB,EACb,0JAA0J;SACjK;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-pull-request-target-branches.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require base-branch scoping for `pull_request_target` triggers.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring `pull_request_target` branch filters. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-pull-request-target-branches.d.ts.map

package/dist/rules/require-pull-request-target-branches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-pull-request-target-branches.d.ts","sourceRoot":"","sources":["../../src/rules/require-pull-request-target-branches.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAsCnC,8EAA8E;AAC9E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAuHhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-pull-request-target-branches.js

@@ -0,0 +1,102 @@
+import { getMappingPair, getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Determine whether a branch filter node is meaningfully configured. */
+const hasConfiguredBranchFilter = (node) => {
+    const valueNode = unwrapYamlValue(node?.value ?? null);
+    if (valueNode === null) {
+        return false;
+    }
+    if (valueNode.type === "YAMLScalar") {
+        const value = getScalarStringValue(valueNode);
+        return value !== null && value.trim().length > 0;
+    }
+    if (valueNode.type !== "YAMLSequence") {
+        return false;
+    }
+    return valueNode.entries.some((entry) => {
+        const value = getScalarStringValue(entry);
+        return value !== null && value.trim().length > 0;
+    });
+};
+/** Rule implementation for requiring `pull_request_target` branch filters. */
+const rule = {
+    create(context) {
+        const reportMissingBranchFilter = (node) => {
+            context.report({
+                messageId: "missingBranchFilter",
+                node: node,
+            });
+        };
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                const onPair = getMappingPair(root, "on");
+                const onValue = unwrapYamlValue(onPair?.value ?? null);
+                if (onValue === null) {
+                    return;
+                }
+                if (onValue.type === "YAMLScalar") {
+                    if (getScalarStringValue(onValue) === "pull_request_target") {
+                        reportMissingBranchFilter(onValue);
+                    }
+                    return;
+                }
+                if (onValue.type === "YAMLSequence") {
+                    for (const entry of onValue.entries) {
+                        if (entry !== null &&
+                            getScalarStringValue(entry) ===
+                                "pull_request_target") {
+                            reportMissingBranchFilter(entry);
+                        }
+                    }
+                    return;
+                }
+                const onMapping = getMappingValueAsMapping(root, "on");
+                if (onMapping === null) {
+                    return;
+                }
+                const pullRequestTargetPair = getMappingPair(onMapping, "pull_request_target");
+                const pullRequestTargetValue = unwrapYamlValue(pullRequestTargetPair?.value ?? null);
+                if (pullRequestTargetPair === null) {
+                    return;
+                }
+                if (pullRequestTargetValue?.type !== "YAMLMapping") {
+                    reportMissingBranchFilter((pullRequestTargetPair.value ??
+                        pullRequestTargetPair));
+                    return;
+                }
+                const branchesPair = getMappingPair(pullRequestTargetValue, "branches");
+                const branchesIgnorePair = getMappingPair(pullRequestTargetValue, "branches-ignore");
+                if (hasConfiguredBranchFilter(branchesPair) ||
+                    hasConfiguredBranchFilter(branchesIgnorePair)) {
+                    return;
+                }
+                reportMissingBranchFilter(pullRequestTargetValue);
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.security",
+                "github-actions.configs.strict",
+            ],
+            description: "require `on.pull_request_target` triggers to scope target base branches with `branches` or `branches-ignore` so privileged workflows do not react to every branch by default.",
+            recommended: false,
+            requiresTypeChecking: false,
+            ruleId: "R032",
+            ruleNumber: 32,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-pull-request-target-branches",
+        },
+        messages: {
+            missingBranchFilter: "`on.pull_request_target` should declare a non-empty `branches` or `branches-ignore` filter to scope which base branches can trigger this privileged workflow.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-pull-request-target-branches.js.map

package/dist/rules/require-pull-request-target-branches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-pull-request-target-branches.js","sourceRoot":"","sources":["../../src/rules/require-pull-request-target-branches.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,yEAAyE;AACzE,MAAM,yBAAyB,GAAG,CAC9B,IAA+C,EACxC,EAAE;IACT,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;IAEvD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAE9C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,8EAA8E;AAC9E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,MAAM,yBAAyB,GAAG,CAC9B,IAA4B,EACxB,EAAE;YACN,OAAO,CAAC,MAAM,CAAC;gBACX,SAAS,EAAE,qBAAqB;gBAChC,IAAI,EAAE,IAA4B;aACrC,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;gBAEvD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACnB,OAAO;gBACX,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAChC,IACI,oBAAoB,CAAC,OAAO,CAAC,KAAK,qBAAqB,EACzD,CAAC;wBACC,yBAAyB,CAAC,OAAO,CAAC,CAAC;oBACvC,CAAC;oBAED,OAAO;gBACX,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBAClC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;wBAClC,IACI,KAAK,KAAK,IAAI;4BACd,oBAAoB,CAAC,KAAK,CAAC;gCACvB,qBAAqB,EAC3B,CAAC;4BACC,yBAAyB,CAAC,KAAK,CAAC,CAAC;wBACrC,CAAC;oBACL,CAAC;oBAED,OAAO;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAEvD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACrB,OAAO;gBACX,CAAC;gBAED,MAAM,qBAAqB,GAAG,cAAc,CACxC,SAAS,EACT,qBAAqB,CACxB,CAAC;gBACF,MAAM,sBAAsB,GAAG,eAAe,CAC1C,qBAAqB,EAAE,KAAK,IAAI,IAAI,CACvC,CAAC;gBAEF,IAAI,qBAAqB,KAAK,IAAI,EAAE,CAAC;oBACjC,OAAO;gBACX,CAAC;gBAED,IAAI,sBAAsB,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;oBACjD,yBAAyB,CACrB,CAAC,qBAAqB,CAAC,KAAK;wBACxB,qBAAqB,CAAiB,CAC7C,CAAC;oBAEF,OAAO;gBACX,CAAC;gBAED,MAAM,YAAY,GAAG,cAAc,CAC/B,sBAAsB,EACtB,UAAU,CACb,CAAC;gBACF,MAAM,kBAAkB,GAAG,cAAc,CACrC,sBAAsB,EACtB,iBAAiB,CACpB,CAAC;gBAEF,IACI,yBAAyB,CAAC,YAAY,CAAC;oBACvC,yBAAyB,CAAC,kBAAkB,CAAC,EAC/C,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;YACtD,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,iCAAiC;gBACjC,+BAA+B;aAClC;YACD,WAAW,EACP,+KAA+K;YACnL,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,6GAA6G;SACrH;QACD,QAAQ,EAAE;YACN,mBAAmB,EACf,+JAA+J;SACtK;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-run-step-shell.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require `run` steps to declare an explicit shell directly or through defaults.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring explicit shells on run steps. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-run-step-shell.d.ts.map

package/dist/rules/require-run-step-shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-run-step-shell.d.ts","sourceRoot":"","sources":["../../src/rules/require-run-step-shell.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAgDnC,sEAAsE;AACtE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAsIhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-run-step-shell.js

@@ -0,0 +1,114 @@
+import { getMappingPair, getMappingValueAsMapping, getMappingValueAsSequence, getScalarStringValue, getWorkflowJobs, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Inspect a shell pair and determine whether it is usable. */
+const getShellDeclarationState = (shellPair) => {
+    if (shellPair === null) {
+        return "missing";
+    }
+    const shellValue = getScalarStringValue(shellPair.value);
+    return shellValue !== null && shellValue.trim().length > 0
+        ? "valid"
+        : "invalid";
+};
+/** Resolve `defaults.run.shell` from a mapping when present. */
+const getRunDefaultsShellPair = (mapping) => {
+    const defaultsMapping = getMappingValueAsMapping(mapping, "defaults");
+    if (defaultsMapping === null) {
+        return null;
+    }
+    const runDefaultsMapping = getMappingValueAsMapping(defaultsMapping, "run");
+    return runDefaultsMapping === null
+        ? null
+        : getMappingPair(runDefaultsMapping, "shell");
+};
+/** Rule implementation for requiring explicit shells on run steps. */
+const rule = {
+    create(context) {
+        const reportInvalidShell = (shellPair, scope) => {
+            context.report({
+                data: {
+                    scope,
+                },
+                messageId: "invalidShell",
+                node: (shellPair.value ?? shellPair),
+            });
+        };
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                const workflowShellPair = getRunDefaultsShellPair(root);
+                const workflowShellState = getShellDeclarationState(workflowShellPair);
+                if (workflowShellPair !== null &&
+                    workflowShellState === "invalid") {
+                    reportInvalidShell(workflowShellPair, "workflow `defaults.run.shell`");
+                }
+                for (const job of getWorkflowJobs(root)) {
+                    const jobShellPair = getRunDefaultsShellPair(job.mapping);
+                    const jobShellState = getShellDeclarationState(jobShellPair);
+                    if (jobShellPair !== null && jobShellState === "invalid") {
+                        reportInvalidShell(jobShellPair, `job '${job.id}' defaults.run.shell`);
+                    }
+                    const stepsSequence = getMappingValueAsSequence(job.mapping, "steps");
+                    if (stepsSequence === null) {
+                        continue;
+                    }
+                    for (const entry of stepsSequence.entries) {
+                        const stepMapping = unwrapYamlValue(entry);
+                        if (stepMapping?.type !== "YAMLMapping") {
+                            continue;
+                        }
+                        const runPair = getMappingPair(stepMapping, "run");
+                        if (runPair === null) {
+                            continue;
+                        }
+                        const stepShellPair = getMappingPair(stepMapping, "shell");
+                        const stepShellState = getShellDeclarationState(stepShellPair);
+                        if (stepShellPair !== null) {
+                            if (stepShellState === "valid") {
+                                continue;
+                            }
+                            reportInvalidShell(stepShellPair, `a run step in job '${job.id}'`);
+                            continue;
+                        }
+                        if (jobShellState !== "missing" ||
+                            workflowShellState !== "missing") {
+                            continue;
+                        }
+                        context.report({
+                            data: {
+                                jobId: job.id,
+                            },
+                            messageId: "missingShell",
+                            node: (runPair.value ??
+                                stepMapping),
+                        });
+                    }
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.strict",
+            ],
+            description: "require `run` steps to use an explicit shell directly or through `defaults.run.shell` so execution behavior stays predictable across runners.",
+            recommended: false,
+            requiresTypeChecking: false,
+            ruleId: "R021",
+            ruleNumber: 21,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-run-step-shell",
+        },
+        messages: {
+            invalidShell: "{{scope}} must set `shell` to a non-empty string when declared.",
+            missingShell: "A `run` step in job '{{jobId}}' should declare `shell` explicitly or inherit it from `defaults.run.shell`.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-run-step-shell.js.map

package/dist/rules/require-run-step-shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-run-step-shell.js","sourceRoot":"","sources":["../../src/rules/require-run-step-shell.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAKvC,+DAA+D;AAC/D,MAAM,wBAAwB,GAAG,CAC7B,SAAwC,EACnB,EAAE;IACvB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEzD,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACtD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC,CAAC;AAEF,gEAAgE;AAChE,MAAM,uBAAuB,GAAG,CAC5B,OAAkC,EACf,EAAE;IACrB,MAAM,eAAe,GAAG,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAEtE,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAE5E,OAAO,kBAAkB,KAAK,IAAI;QAC9B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,cAAc,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC,CAAC;AAEF,sEAAsE;AACtE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,MAAM,kBAAkB,GAAG,CACvB,SAAiC,EACjC,KAAa,EACT,EAAE;YACN,OAAO,CAAC,MAAM,CAAC;gBACX,IAAI,EAAE;oBACF,KAAK;iBACR;gBACD,SAAS,EAAE,cAAc;gBACzB,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,SAAS,CAAyB;aAC/D,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBACxD,MAAM,kBAAkB,GACpB,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;gBAEhD,IACI,iBAAiB,KAAK,IAAI;oBAC1B,kBAAkB,KAAK,SAAS,EAClC,CAAC;oBACC,kBAAkB,CACd,iBAAiB,EACjB,+BAA+B,CAClC,CAAC;gBACN,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,YAAY,GAAG,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBAC1D,MAAM,aAAa,GACf,wBAAwB,CAAC,YAAY,CAAC,CAAC;oBAE3C,IAAI,YAAY,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;wBACvD,kBAAkB,CACd,YAAY,EACZ,QAAQ,GAAG,CAAC,EAAE,sBAAsB,CACvC,CAAC;oBACN,CAAC;oBAED,MAAM,aAAa,GAAG,yBAAyB,CAC3C,GAAG,CAAC,OAAO,EACX,OAAO,CACV,CAAC;oBAEF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;wBACzB,SAAS;oBACb,CAAC;oBAED,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;wBACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;wBAE3C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;4BACtC,SAAS;wBACb,CAAC;wBAED,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;wBAEnD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;4BACnB,SAAS;wBACb,CAAC;wBAED,MAAM,aAAa,GAAG,cAAc,CAChC,WAAW,EACX,OAAO,CACV,CAAC;wBACF,MAAM,cAAc,GAChB,wBAAwB,CAAC,aAAa,CAAC,CAAC;wBAE5C,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;4BACzB,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;gCAC7B,SAAS;4BACb,CAAC;4BAED,kBAAkB,CACd,aAAa,EACb,sBAAsB,GAAG,CAAC,EAAE,GAAG,CAClC,CAAC;4BAEF,SAAS;wBACb,CAAC;wBAED,IACI,aAAa,KAAK,SAAS;4BAC3B,kBAAkB,KAAK,SAAS,EAClC,CAAC;4BACC,SAAS;wBACb,CAAC;wBAED,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,KAAK,EAAE,GAAG,CAAC,EAAE;6BAChB;4BACD,SAAS,EAAE,cAAc;4BACzB,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK;gCAChB,WAAW,CAAyB;yBAC3C,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,+IAA+I;YACnJ,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,+FAA+F;SACvG;QACD,QAAQ,EAAE;YACN,YAAY,EACR,iEAAiE;YACrE,YAAY,EACR,4GAA4G;SACnH;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-template-categories.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require `categories` in workflow-template properties metadata.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring template categories. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-template-categories.d.ts.map