eslint-plugin-github-actions-2 1.0.0

package/dist/rules/require-workflow-call-output-value.js

@@ -0,0 +1,79 @@
+import { getMappingPair, getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Rule implementation for requiring explicit reusable-workflow output values. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                const onMapping = getMappingValueAsMapping(root, "on");
+                if (onMapping === null) {
+                    return;
+                }
+                const workflowCallMapping = unwrapYamlValue(getMappingPair(onMapping, "workflow_call")?.value ?? null);
+                if (workflowCallMapping?.type !== "YAMLMapping") {
+                    return;
+                }
+                const outputsMapping = getMappingValueAsMapping(workflowCallMapping, "outputs");
+                if (outputsMapping === null) {
+                    return;
+                }
+                for (const pair of outputsMapping.pairs) {
+                    const outputId = getScalarStringValue(pair.key);
+                    const outputMapping = unwrapYamlValue(pair.value);
+                    if (outputId === null ||
+                        outputMapping?.type !== "YAMLMapping") {
+                        continue;
+                    }
+                    const valuePair = getMappingPair(outputMapping, "value");
+                    if (valuePair === null) {
+                        context.report({
+                            data: {
+                                outputId,
+                            },
+                            messageId: "missingValue",
+                            node: pair.key,
+                        });
+                        continue;
+                    }
+                    const value = getScalarStringValue(valuePair.value);
+                    if (value === null || value.trim().length === 0) {
+                        context.report({
+                            data: {
+                                outputId,
+                            },
+                            messageId: "invalidValue",
+                            node: (valuePair.value ??
+                                valuePair),
+                        });
+                    }
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.recommended",
+                "github-actions.configs.strict",
+            ],
+            description: "require every `workflow_call` output to declare a non-empty `value` so reusable workflows expose concrete runtime output mappings.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R039",
+            ruleNumber: 39,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-workflow-call-output-value",
+        },
+        messages: {
+            invalidValue: "`workflow_call` output '{{outputId}}' must set `value` to a non-empty scalar expression.",
+            missingValue: "`workflow_call` output '{{outputId}}' should declare `value` explicitly.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-workflow-call-output-value.js.map

package/dist/rules/require-workflow-call-output-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-workflow-call-output-value.js","sourceRoot":"","sources":["../../src/rules/require-workflow-call-output-value.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,kFAAkF;AAClF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAEvD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACrB,OAAO;gBACX,CAAC;gBAED,MAAM,mBAAmB,GAAG,eAAe,CACvC,cAAc,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,KAAK,IAAI,IAAI,CAC5D,CAAC;gBAEF,IAAI,mBAAmB,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;oBAC9C,OAAO;gBACX,CAAC;gBAED,MAAM,cAAc,GAAG,wBAAwB,CAC3C,mBAAmB,EACnB,SAAS,CACZ,CAAC;gBAEF,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;oBAC1B,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;oBACtC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAChD,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAElD,IACI,QAAQ,KAAK,IAAI;wBACjB,aAAa,EAAE,IAAI,KAAK,aAAa,EACvC,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,MAAM,SAAS,GAAG,cAAc,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;oBAEzD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;wBACrB,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,QAAQ;6BACX;4BACD,SAAS,EAAE,cAAc;4BACzB,IAAI,EAAE,IAAI,CAAC,GAA2B;yBACzC,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBAEpD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC9C,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,QAAQ;6BACX;4BACD,SAAS,EAAE,cAAc;4BACzB,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK;gCAClB,SAAS,CAAyB;yBACzC,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,oCAAoC;gBACpC,+BAA+B;aAClC;YACD,WAAW,EACP,oIAAoI;YACxI,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,2GAA2G;SACnH;QACD,QAAQ,EAAE;YACN,YAAY,EACR,0FAA0F;YAC9F,YAAY,EACR,0EAA0E;SACjF;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-workflow-concurrency.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require top-level workflow concurrency controls for relevant workflow triggers.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring workflow-level concurrency controls. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-workflow-concurrency.d.ts.map

package/dist/rules/require-workflow-concurrency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-workflow-concurrency.d.ts","sourceRoot":"","sources":["../../src/rules/require-workflow-concurrency.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AA4BnC,6EAA6E;AAC7E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAkMhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-workflow-concurrency.js

@@ -0,0 +1,157 @@
+import { getMappingPair, getScalarStringValue, getWorkflowEventNames, getWorkflowRoot, isGithubExpressionScalar, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Default event set that most benefits from workflow-level concurrency. */
+const DEFAULT_TRIGGER_EVENTS = [
+    "merge_group",
+    "pull_request",
+    "pull_request_target",
+    "push",
+    "workflow_dispatch",
+];
+/** Rule implementation for requiring workflow-level concurrency controls. */
+const rule = {
+    create(context) {
+        const [options] = context.options;
+        const requiredTriggerEvents = new Set(options?.onlyForEvents ?? DEFAULT_TRIGGER_EVENTS);
+        const requireCancelInProgress = options?.requireCancelInProgress ?? true;
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                const eventNames = getWorkflowEventNames(root);
+                const shouldRequireConcurrency = [
+                    ...requiredTriggerEvents,
+                ].some((eventName) => eventNames.has(eventName));
+                if (!shouldRequireConcurrency) {
+                    return;
+                }
+                const concurrencyPair = getMappingPair(root, "concurrency");
+                if (concurrencyPair === null) {
+                    context.report({
+                        messageId: "missingConcurrency",
+                        node: root,
+                    });
+                    return;
+                }
+                const concurrencyValue = unwrapYamlValue(concurrencyPair.value);
+                if (concurrencyValue === null) {
+                    context.report({
+                        messageId: "invalidConcurrency",
+                        node: concurrencyPair,
+                    });
+                    return;
+                }
+                if (concurrencyValue.type === "YAMLScalar") {
+                    const groupValue = getScalarStringValue(concurrencyValue);
+                    if (groupValue === null || groupValue.trim().length === 0) {
+                        context.report({
+                            messageId: "invalidConcurrency",
+                            node: concurrencyValue,
+                        });
+                    }
+                    return;
+                }
+                if (concurrencyValue.type !== "YAMLMapping") {
+                    context.report({
+                        messageId: "invalidConcurrency",
+                        node: concurrencyValue,
+                    });
+                    return;
+                }
+                const groupPair = getMappingPair(concurrencyValue, "group");
+                const groupValue = getScalarStringValue(groupPair?.value ?? null);
+                if (groupPair === null ||
+                    groupValue === null ||
+                    groupValue.trim() === "") {
+                    context.report({
+                        messageId: "missingGroup",
+                        node: groupPair?.key ?? concurrencyValue,
+                    });
+                }
+                if (!requireCancelInProgress) {
+                    return;
+                }
+                const cancelInProgressPair = getMappingPair(concurrencyValue, "cancel-in-progress");
+                if (cancelInProgressPair === null) {
+                    context.report({
+                        messageId: "missingCancelInProgress",
+                        node: concurrencyValue,
+                    });
+                    return;
+                }
+                if (isGithubExpressionScalar(cancelInProgressPair.value)) {
+                    return;
+                }
+                if (unwrapYamlValue(cancelInProgressPair.value)?.type !==
+                    "YAMLScalar") {
+                    context.report({
+                        messageId: "cancelInProgressDisabled",
+                        node: cancelInProgressPair.value ?? cancelInProgressPair,
+                    });
+                    return;
+                }
+                if (cancelInProgressPair.value?.type !== "YAMLScalar") {
+                    context.report({
+                        messageId: "cancelInProgressDisabled",
+                        node: cancelInProgressPair.value ?? cancelInProgressPair,
+                    });
+                    return;
+                }
+                if (cancelInProgressPair.value.value !== true) {
+                    context.report({
+                        messageId: "cancelInProgressDisabled",
+                        node: cancelInProgressPair.value,
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        defaultOptions: [{}],
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.strict",
+            ],
+            description: "require workflow-level `concurrency` so redundant runs can be deduplicated predictably.",
+            recommended: false,
+            requiresTypeChecking: false,
+            ruleId: "R004",
+            ruleNumber: 4,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-workflow-concurrency",
+        },
+        messages: {
+            cancelInProgressDisabled: "Workflow `concurrency.cancel-in-progress` should be `true` or a GitHub expression so stale runs can be cancelled.",
+            invalidConcurrency: "Workflow `concurrency` should be a string/expression or an object containing at least `group`.",
+            missingCancelInProgress: "Workflow `concurrency` should set `cancel-in-progress` to cancel superseded runs.",
+            missingConcurrency: "Add a top-level `concurrency` block so overlapping workflow runs do not pile up.",
+            missingGroup: "Workflow `concurrency` should declare a non-empty `group` value.",
+        },
+        schema: [
+            {
+                additionalProperties: false,
+                description: "Optional configuration for which events require workflow-level concurrency and whether cancel-in-progress is mandatory.",
+                properties: {
+                    onlyForEvents: {
+                        description: "Event names that should trigger the workflow-level concurrency requirement.",
+                        items: {
+                            minLength: 1,
+                            type: "string",
+                        },
+                        type: "array",
+                        uniqueItems: true,
+                    },
+                    requireCancelInProgress: {
+                        description: "Require concurrency.cancel-in-progress so newer runs can cancel superseded work.",
+                        type: "boolean",
+                    },
+                },
+                type: "object",
+            },
+        ],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-workflow-concurrency.js.map

package/dist/rules/require-workflow-concurrency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-workflow-concurrency.js","sourceRoot":"","sources":["../../src/rules/require-workflow-concurrency.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,4EAA4E;AAC5E,MAAM,sBAAsB,GAAG;IAC3B,aAAa;IACb,cAAc;IACd,qBAAqB;IACrB,MAAM;IACN,mBAAmB;CACb,CAAC;AAUX,6EAA6E;AAC7E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAA4C,CAAC;QACvE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACjC,OAAO,EAAE,aAAa,IAAI,sBAAsB,CACnD,CAAC;QACF,MAAM,uBAAuB,GACzB,OAAO,EAAE,uBAAuB,IAAI,IAAI,CAAC;QAE7C,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBAC/C,MAAM,wBAAwB,GAAG;oBAC7B,GAAG,qBAAqB;iBAC3B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;gBAEjD,IAAI,CAAC,wBAAwB,EAAE,CAAC;oBAC5B,OAAO;gBACX,CAAC;gBAED,MAAM,eAAe,GAAG,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAE5D,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;oBAC3B,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,oBAAoB;wBAC/B,IAAI,EAAE,IAAI;qBACb,CAAC,CAAC;oBAEH,OAAO;gBACX,CAAC;gBAED,MAAM,gBAAgB,GAAG,eAAe,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAEhE,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;oBAC5B,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,oBAAoB;wBAC/B,IAAI,EAAE,eAAe;qBACxB,CAAC,CAAC;oBAEH,OAAO;gBACX,CAAC;gBAED,IAAI,gBAAgB,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACzC,MAAM,UAAU,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;oBAE1D,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACxD,OAAO,CAAC,MAAM,CAAC;4BACX,SAAS,EAAE,oBAAoB;4BAC/B,IAAI,EAAE,gBAAgB;yBACzB,CAAC,CAAC;oBACP,CAAC;oBAED,OAAO;gBACX,CAAC;gBAED,IAAI,gBAAgB,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBAC1C,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,oBAAoB;wBAC/B,IAAI,EAAE,gBAAgB;qBACzB,CAAC,CAAC;oBAEH,OAAO;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,cAAc,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;gBAC5D,MAAM,UAAU,GAAG,oBAAoB,CACnC,SAAS,EAAE,KAAK,IAAI,IAAI,CAC3B,CAAC;gBAEF,IACI,SAAS,KAAK,IAAI;oBAClB,UAAU,KAAK,IAAI;oBACnB,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAC1B,CAAC;oBACC,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,cAAc;wBACzB,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,gBAAgB;qBAC3C,CAAC,CAAC;gBACP,CAAC;gBAED,IAAI,CAAC,uBAAuB,EAAE,CAAC;oBAC3B,OAAO;gBACX,CAAC;gBAED,MAAM,oBAAoB,GAAG,cAAc,CACvC,gBAAgB,EAChB,oBAAoB,CACvB,CAAC;gBAEF,IAAI,oBAAoB,KAAK,IAAI,EAAE,CAAC;oBAChC,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,yBAAyB;wBACpC,IAAI,EAAE,gBAAgB;qBACzB,CAAC,CAAC;oBAEH,OAAO;gBACX,CAAC;gBAED,IAAI,wBAAwB,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvD,OAAO;gBACX,CAAC;gBAED,IACI,eAAe,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,IAAI;oBACjD,YAAY,EACd,CAAC;oBACC,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,0BAA0B;wBACrC,IAAI,EACA,oBAAoB,CAAC,KAAK,IAAI,oBAAoB;qBACzD,CAAC,CAAC;oBAEH,OAAO;gBACX,CAAC;gBAED,IAAI,oBAAoB,CAAC,KAAK,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;oBACpD,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,0BAA0B;wBACrC,IAAI,EACA,oBAAoB,CAAC,KAAK,IAAI,oBAAoB;qBACzD,CAAC,CAAC;oBAEH,OAAO;gBACX,CAAC;gBAED,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC5C,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,0BAA0B;wBACrC,IAAI,EAAE,oBAAoB,CAAC,KAAK;qBACnC,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,cAAc,EAAE,CAAC,EAAE,CAAC;QACpB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,yFAAyF;YAC7F,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,CAAC;YACb,GAAG,EAAE,qGAAqG;SAC7G;QACD,QAAQ,EAAE;YACN,wBAAwB,EACpB,mHAAmH;YACvH,kBAAkB,EACd,gGAAgG;YACpG,uBAAuB,EACnB,mFAAmF;YACvF,kBAAkB,EACd,kFAAkF;YACtF,YAAY,EACR,kEAAkE;SACzE;QACD,MAAM,EAAE;YACJ;gBACI,oBAAoB,EAAE,KAAK;gBAC3B,WAAW,EACP,yHAAyH;gBAC7H,UAAU,EAAE;oBACR,aAAa,EAAE;wBACX,WAAW,EACP,6EAA6E;wBACjF,KAAK,EAAE;4BACH,SAAS,EAAE,CAAC;4BACZ,IAAI,EAAE,QAAQ;yBACjB;wBACD,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,IAAI;qBACpB;oBACD,uBAAuB,EAAE;wBACrB,WAAW,EACP,kFAAkF;wBACtF,IAAI,EAAE,SAAS;qBAClB;iBACJ;gBACD,IAAI,EAAE,QAAQ;aACjB;SACJ;QACD,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-workflow-dispatch-input-type.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require explicit types for `workflow_dispatch` inputs.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring explicit workflow_dispatch input types. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-workflow-dispatch-input-type.d.ts.map

package/dist/rules/require-workflow-dispatch-input-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-workflow-dispatch-input-type.d.ts","sourceRoot":"","sources":["../../src/rules/require-workflow-dispatch-input-type.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAUnC,gFAAgF;AAChF,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAmGhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-workflow-dispatch-input-type.js

@@ -0,0 +1,80 @@
+import { getMappingPair, getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Rule implementation for requiring explicit workflow_dispatch input types. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                const onMapping = getMappingValueAsMapping(root, "on");
+                if (onMapping === null) {
+                    return;
+                }
+                const workflowDispatchMapping = unwrapYamlValue(getMappingPair(onMapping, "workflow_dispatch")?.value ??
+                    null);
+                if (workflowDispatchMapping?.type !== "YAMLMapping") {
+                    return;
+                }
+                const inputsMapping = getMappingValueAsMapping(workflowDispatchMapping, "inputs");
+                if (inputsMapping === null) {
+                    return;
+                }
+                for (const pair of inputsMapping.pairs) {
+                    const inputId = getScalarStringValue(pair.key);
+                    const inputMapping = unwrapYamlValue(pair.value);
+                    if (inputId === null ||
+                        inputMapping?.type !== "YAMLMapping") {
+                        continue;
+                    }
+                    const typePair = getMappingPair(inputMapping, "type");
+                    if (typePair === null) {
+                        context.report({
+                            data: {
+                                inputId,
+                            },
+                            messageId: "missingType",
+                            node: pair.key,
+                        });
+                        continue;
+                    }
+                    const typeValue = getScalarStringValue(typePair.value);
+                    if (typeValue === null || typeValue.trim().length === 0) {
+                        context.report({
+                            data: {
+                                inputId,
+                            },
+                            messageId: "invalidType",
+                            node: (typePair.value ??
+                                typePair),
+                        });
+                    }
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.recommended",
+                "github-actions.configs.strict",
+            ],
+            description: "require every `workflow_dispatch` input to declare an explicit `type` so manual runs expose clearer controls and preserve intended value semantics.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R022",
+            ruleNumber: 22,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-workflow-dispatch-input-type",
+        },
+        messages: {
+            invalidType: "`workflow_dispatch` input '{{inputId}}' must set `type` to a non-empty string.",
+            missingType: "`workflow_dispatch` input '{{inputId}}' should declare `type` explicitly.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-workflow-dispatch-input-type.js.map

package/dist/rules/require-workflow-dispatch-input-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-workflow-dispatch-input-type.js","sourceRoot":"","sources":["../../src/rules/require-workflow-dispatch-input-type.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,gFAAgF;AAChF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAEvD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACrB,OAAO;gBACX,CAAC;gBAED,MAAM,uBAAuB,GAAG,eAAe,CAC3C,cAAc,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,KAAK;oBACjD,IAAI,CACX,CAAC;gBAEF,IAAI,uBAAuB,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;oBAClD,OAAO;gBACX,CAAC;gBAED,MAAM,aAAa,GAAG,wBAAwB,CAC1C,uBAAuB,EACvB,QAAQ,CACX,CAAC;gBAEF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;oBACzB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;oBACrC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC/C,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAEjD,IACI,OAAO,KAAK,IAAI;wBAChB,YAAY,EAAE,IAAI,KAAK,aAAa,EACtC,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;oBAEtD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;wBACpB,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,OAAO;6BACV;4BACD,SAAS,EAAE,aAAa;4BACxB,IAAI,EAAE,IAAI,CAAC,GAA2B;yBACzC,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBAEvD,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACtD,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,OAAO;6BACV;4BACD,SAAS,EAAE,aAAa;4BACxB,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK;gCACjB,QAAQ,CAAyB;yBACxC,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,oCAAoC;gBACpC,+BAA+B;aAClC;YACD,WAAW,EACP,qJAAqJ;YACzJ,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,6GAA6G;SACrH;QACD,QAAQ,EAAE;YACN,WAAW,EACP,gFAAgF;YACpF,WAAW,EACP,2EAA2E;SAClF;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-workflow-interface-description.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require descriptions for manual and reusable workflow interfaces.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring workflow interface descriptions. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-workflow-interface-description.d.ts.map

package/dist/rules/require-workflow-interface-description.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-workflow-interface-description.d.ts","sourceRoot":"","sources":["../../src/rules/require-workflow-interface-description.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAwDnC,yEAAyE;AACzE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA4GhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-workflow-interface-description.js

@@ -0,0 +1,98 @@
+import { getMappingPair, getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Report missing or invalid descriptions across interface mappings. */
+const checkInterfaceDescriptions = (context, mapping, kind) => {
+    for (const pair of mapping.pairs) {
+        const name = getScalarStringValue(pair.key);
+        const entryMapping = unwrapYamlValue(pair.value);
+        if (name === null || entryMapping?.type !== "YAMLMapping") {
+            continue;
+        }
+        const descriptionPair = getMappingPair(entryMapping, "description");
+        if (descriptionPair === null) {
+            context.report({
+                data: {
+                    kind,
+                    name,
+                },
+                messageId: "missingDescription",
+                node: pair.key,
+            });
+            continue;
+        }
+        const descriptionValue = getScalarStringValue(descriptionPair.value);
+        if (descriptionValue === null || descriptionValue.trim().length === 0) {
+            context.report({
+                data: {
+                    kind,
+                    name,
+                },
+                messageId: "invalidDescription",
+                node: (descriptionPair.value ??
+                    descriptionPair),
+            });
+        }
+    }
+};
+/** Rule implementation for requiring workflow interface descriptions. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                const onMapping = getMappingValueAsMapping(root, "on");
+                if (onMapping === null) {
+                    return;
+                }
+                const workflowDispatchMapping = unwrapYamlValue(getMappingPair(onMapping, "workflow_dispatch")?.value ??
+                    null);
+                if (workflowDispatchMapping?.type === "YAMLMapping") {
+                    const dispatchInputsMapping = getMappingValueAsMapping(workflowDispatchMapping, "inputs");
+                    if (dispatchInputsMapping !== null) {
+                        checkInterfaceDescriptions(context, dispatchInputsMapping, "workflow_dispatch input");
+                    }
+                }
+                const workflowCallMapping = unwrapYamlValue(getMappingPair(onMapping, "workflow_call")?.value ?? null);
+                if (workflowCallMapping?.type !== "YAMLMapping") {
+                    return;
+                }
+                const workflowCallInputsMapping = getMappingValueAsMapping(workflowCallMapping, "inputs");
+                if (workflowCallInputsMapping !== null) {
+                    checkInterfaceDescriptions(context, workflowCallInputsMapping, "workflow_call input");
+                }
+                const workflowCallSecretsMapping = getMappingValueAsMapping(workflowCallMapping, "secrets");
+                if (workflowCallSecretsMapping !== null) {
+                    checkInterfaceDescriptions(context, workflowCallSecretsMapping, "workflow_call secret");
+                }
+                const workflowCallOutputsMapping = getMappingValueAsMapping(workflowCallMapping, "outputs");
+                if (workflowCallOutputsMapping !== null) {
+                    checkInterfaceDescriptions(context, workflowCallOutputsMapping, "workflow_call output");
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.strict",
+            ],
+            description: "require descriptions for `workflow_dispatch` inputs and reusable workflow interfaces so manual forms and callable workflows stay self-documenting.",
+            recommended: false,
+            requiresTypeChecking: false,
+            ruleId: "R024",
+            ruleNumber: 24,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-workflow-interface-description",
+        },
+        messages: {
+            invalidDescription: "{{kind}} '{{name}}' must set `description` to a non-empty string.",
+            missingDescription: "{{kind}} '{{name}}' should declare `description` explicitly.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-workflow-interface-description.js.map

package/dist/rules/require-workflow-interface-description.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-workflow-interface-description.js","sourceRoot":"","sources":["../../src/rules/require-workflow-interface-description.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,wEAAwE;AACxE,MAAM,0BAA0B,GAAG,CAC/B,OAAmC,EACnC,OAAkC,EAClC,IAAY,EACR,EAAE;IACN,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEjD,IAAI,IAAI,KAAK,IAAI,IAAI,YAAY,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;YACxD,SAAS;QACb,CAAC;QAED,MAAM,eAAe,GAAG,cAAc,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAEpE,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC;gBACX,IAAI,EAAE;oBACF,IAAI;oBACJ,IAAI;iBACP;gBACD,SAAS,EAAE,oBAAoB;gBAC/B,IAAI,EAAE,IAAI,CAAC,GAA2B;aACzC,CAAC,CAAC;YAEH,SAAS;QACb,CAAC;QAED,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAErE,IAAI,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,MAAM,CAAC;gBACX,IAAI,EAAE;oBACF,IAAI;oBACJ,IAAI;iBACP;gBACD,SAAS,EAAE,oBAAoB;gBAC/B,IAAI,EAAE,CAAC,eAAe,CAAC,KAAK;oBACxB,eAAe,CAAyB;aAC/C,CAAC,CAAC;QACP,CAAC;IACL,CAAC;AACL,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAEvD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACrB,OAAO;gBACX,CAAC;gBAED,MAAM,uBAAuB,GAAG,eAAe,CAC3C,cAAc,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,KAAK;oBACjD,IAAI,CACX,CAAC;gBAEF,IAAI,uBAAuB,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;oBAClD,MAAM,qBAAqB,GAAG,wBAAwB,CAClD,uBAAuB,EACvB,QAAQ,CACX,CAAC;oBAEF,IAAI,qBAAqB,KAAK,IAAI,EAAE,CAAC;wBACjC,0BAA0B,CACtB,OAAO,EACP,qBAAqB,EACrB,yBAAyB,CAC5B,CAAC;oBACN,CAAC;gBACL,CAAC;gBAED,MAAM,mBAAmB,GAAG,eAAe,CACvC,cAAc,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,KAAK,IAAI,IAAI,CAC5D,CAAC;gBAEF,IAAI,mBAAmB,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;oBAC9C,OAAO;gBACX,CAAC;gBAED,MAAM,yBAAyB,GAAG,wBAAwB,CACtD,mBAAmB,EACnB,QAAQ,CACX,CAAC;gBAEF,IAAI,yBAAyB,KAAK,IAAI,EAAE,CAAC;oBACrC,0BAA0B,CACtB,OAAO,EACP,yBAAyB,EACzB,qBAAqB,CACxB,CAAC;gBACN,CAAC;gBAED,MAAM,0BAA0B,GAAG,wBAAwB,CACvD,mBAAmB,EACnB,SAAS,CACZ,CAAC;gBAEF,IAAI,0BAA0B,KAAK,IAAI,EAAE,CAAC;oBACtC,0BAA0B,CACtB,OAAO,EACP,0BAA0B,EAC1B,sBAAsB,CACzB,CAAC;gBACN,CAAC;gBAED,MAAM,0BAA0B,GAAG,wBAAwB,CACvD,mBAAmB,EACnB,SAAS,CACZ,CAAC;gBAEF,IAAI,0BAA0B,KAAK,IAAI,EAAE,CAAC;oBACtC,0BAA0B,CACtB,OAAO,EACP,0BAA0B,EAC1B,sBAAsB,CACzB,CAAC;gBACN,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,oJAAoJ;YACxJ,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,+GAA+G;SACvH;QACD,QAAQ,EAAE;YACN,kBAAkB,EACd,mEAAmE;YACvE,kBAAkB,EACd,8DAA8D;SACrE;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-workflow-permissions.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require explicit GitHub token permissions at workflow or job scope.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring explicit workflow or job token permissions. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-workflow-permissions.d.ts.map

package/dist/rules/require-workflow-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-workflow-permissions.d.ts","sourceRoot":"","sources":["../../src/rules/require-workflow-permissions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAenC,oFAAoF;AACpF,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA8FhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-workflow-permissions.js

@@ -0,0 +1,83 @@
+import { getMappingPair, getWorkflowJobs, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
+/** Rule implementation for requiring explicit workflow or job token permissions. */
+const rule = {
+    create(context) {
+        const [options] = context.options;
+        const allowJobLevelPermissions = options?.allowJobLevelPermissions ?? true;
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                if (getMappingPair(root, "permissions") !== null) {
+                    return;
+                }
+                const jobs = getWorkflowJobs(root);
+                if (!allowJobLevelPermissions) {
+                    context.report({
+                        messageId: "missingWorkflowPermissions",
+                        node: root,
+                    });
+                    return;
+                }
+                if (jobs.length === 0) {
+                    context.report({
+                        messageId: "missingWorkflowPermissions",
+                        node: root,
+                    });
+                    return;
+                }
+                for (const job of jobs) {
+                    if (getMappingPair(job.mapping, "permissions") !== null) {
+                        continue;
+                    }
+                    context.report({
+                        data: {
+                            jobId: job.id,
+                        },
+                        messageId: "missingJobPermissions",
+                        node: job.idNode,
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        defaultOptions: [{}],
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.recommended",
+                "github-actions.configs.security",
+                "github-actions.configs.strict",
+            ],
+            description: "require explicit `permissions` to avoid relying on GitHub Actions' default token scope.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R001",
+            ruleNumber: 1,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-workflow-permissions",
+        },
+        messages: {
+            missingJobPermissions: "Job '{{jobId}}' is missing explicit `permissions`. Define workflow-level `permissions` or add `jobs.{{jobId}}.permissions`.",
+            missingWorkflowPermissions: "Define explicit top-level `permissions` for this workflow, or configure job-level `permissions` for every job.",
+        },
+        schema: [
+            {
+                additionalProperties: false,
+                description: "Optional configuration for how strictly workflow permissions must be declared.",
+                properties: {
+                    allowJobLevelPermissions: {
+                        description: "Allow each job to declare its own permissions when the workflow omits a top-level permissions block.",
+                        type: "boolean",
+                    },
+                },
+                type: "object",
+            },
+        ],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-workflow-permissions.js.map

package/dist/rules/require-workflow-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-workflow-permissions.js","sourceRoot":"","sources":["../../src/rules/require-workflow-permissions.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,cAAc,EACd,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AASvC,oFAAoF;AACpF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAA4C,CAAC;QACvE,MAAM,wBAAwB,GAC1B,OAAO,EAAE,wBAAwB,IAAI,IAAI,CAAC;QAE9C,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,IAAI,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC/C,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;gBAEnC,IAAI,CAAC,wBAAwB,EAAE,CAAC;oBAC5B,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,4BAA4B;wBACvC,IAAI,EAAE,IAAI;qBACb,CAAC,CAAC;oBAEH,OAAO;gBACX,CAAC;gBAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACpB,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,4BAA4B;wBACvC,IAAI,EAAE,IAAI;qBACb,CAAC,CAAC;oBAEH,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACrB,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;wBACtD,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,KAAK,EAAE,GAAG,CAAC,EAAE;yBAChB;wBACD,SAAS,EAAE,uBAAuB;wBAClC,IAAI,EAAE,GAAG,CAAC,MAAM;qBACnB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,cAAc,EAAE,CAAC,EAAE,CAAC;QACpB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,oCAAoC;gBACpC,iCAAiC;gBACjC,+BAA+B;aAClC;YACD,WAAW,EACP,yFAAyF;YAC7F,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,CAAC;YACb,GAAG,EAAE,qGAAqG;SAC7G;QACD,QAAQ,EAAE;YACN,qBAAqB,EACjB,6HAA6H;YACjI,0BAA0B,EACtB,gHAAgH;SACvH;QACD,MAAM,EAAE;YACJ;gBACI,oBAAoB,EAAE,KAAK;gBAC3B,WAAW,EACP,gFAAgF;gBACpF,UAAU,EAAE;oBACR,wBAAwB,EAAE;wBACtB,WAAW,EACP,sGAAsG;wBAC1G,IAAI,EAAE,SAAS;qBAClB;iBACJ;gBACD,IAAI,EAAE,QAAQ;aACjB;SACJ;QACD,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-workflow-run-branches.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require branch scoping for `workflow_run` triggers.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring `workflow_run` branch filters. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-workflow-run-branches.d.ts.map

package/dist/rules/require-workflow-run-branches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-workflow-run-branches.d.ts","sourceRoot":"","sources":["../../src/rules/require-workflow-run-branches.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAyCnC,uEAAuE;AACvE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAmFhB,CAAC;AAEF,eAAe,IAAI,CAAC"}