eslint-plugin-github-actions-2 1.0.0

package/dist/rules/no-case-insensitive-input-id-collision.js

@@ -0,0 +1,66 @@
+import { isActionMetadataFile } from "../_internal/lint-targets.js";
+import { getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
+/** Rule implementation for case-insensitive input id collision detection. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                if (!isActionMetadataFile(context.filename)) {
+                    return;
+                }
+                const root = getWorkflowRoot(context);
+                const inputsMapping = root === null
+                    ? null
+                    : getMappingValueAsMapping(root, "inputs");
+                if (inputsMapping === null) {
+                    return;
+                }
+                const inputByCanonicalId = new Map();
+                for (const pair of inputsMapping.pairs) {
+                    const inputId = getScalarStringValue(pair.key);
+                    if (inputId === null) {
+                        continue;
+                    }
+                    const canonicalId = inputId.toLowerCase();
+                    const firstSeenInputId = inputByCanonicalId.get(canonicalId);
+                    if (firstSeenInputId === undefined) {
+                        inputByCanonicalId.set(canonicalId, inputId);
+                        continue;
+                    }
+                    if (firstSeenInputId === inputId) {
+                        continue;
+                    }
+                    context.report({
+                        data: {
+                            firstInputId: firstSeenInputId,
+                            inputId,
+                        },
+                        messageId: "collidingInputId",
+                        node: pair.key,
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.actionMetadata",
+                "github-actions.configs.all",
+            ],
+            description: "disallow case-insensitive collisions between action input ids.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R048",
+            ruleNumber: 48,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-case-insensitive-input-id-collision",
+        },
+        messages: {
+            collidingInputId: "Input '{{inputId}}' collides with '{{firstInputId}}' when normalized case-insensitively.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-case-insensitive-input-id-collision.js.map

package/dist/rules/no-case-insensitive-input-id-collision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-case-insensitive-input-id-collision.js","sourceRoot":"","sources":["../../src/rules/no-case-insensitive-input-id-collision.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACH,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,6EAA6E;AAC7E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1C,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACtC,MAAM,aAAa,GACf,IAAI,KAAK,IAAI;oBACT,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAEnD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;oBACzB,OAAO;gBACX,CAAC;gBAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;gBAErD,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;oBACrC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAE/C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;wBACnB,SAAS;oBACb,CAAC;oBAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;oBAC1C,MAAM,gBAAgB,GAClB,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBAExC,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;wBACjC,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;wBAE7C,SAAS;oBACb,CAAC;oBAED,IAAI,gBAAgB,KAAK,OAAO,EAAE,CAAC;wBAC/B,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,YAAY,EAAE,gBAAgB;4BAC9B,OAAO;yBACV;wBACD,SAAS,EAAE,kBAAkB;wBAC7B,IAAI,EAAE,IAAI,CAAC,GAA2B;qBACzC,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,uCAAuC;gBACvC,4BAA4B;aAC/B;YACD,WAAW,EACP,gEAAgE;YACpE,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,+GAA+G;SACvH;QACD,QAAQ,EAAE;YACN,gBAAgB,EACZ,0FAA0F;SACjG;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-composite-input-env-access.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow INPUT_* environment variable access inside composite action runs.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for composite input access style checks. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-composite-input-env-access.d.ts.map

package/dist/rules/no-composite-input-env-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-composite-input-env-access.d.ts","sourceRoot":"","sources":["../../src/rules/no-composite-input-env-access.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAanC,mEAAmE;AACnE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAqEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-composite-input-env-access.js

@@ -0,0 +1,62 @@
+import { isActionMetadataFile } from "../_internal/lint-targets.js";
+import { getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
+import { visitYamlStringScalars } from "../_internal/yaml-traversal.js";
+/** Composite-action INPUT_* environment variable reference detector. */
+const inputEnvironmentPattern = /\bINPUT_[\dA-Z_]+\b/g;
+/** Rule implementation for composite input access style checks. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                if (!isActionMetadataFile(context.filename)) {
+                    return;
+                }
+                const root = getWorkflowRoot(context);
+                const runsMapping = root === null
+                    ? null
+                    : getMappingValueAsMapping(root, "runs");
+                if (runsMapping === null) {
+                    return;
+                }
+                const usingRuntime = getScalarStringValue(runsMapping.pairs.find((pair) => getScalarStringValue(pair.key) === "using")?.value);
+                if (usingRuntime !== "composite") {
+                    return;
+                }
+                visitYamlStringScalars(runsMapping, (node, value) => {
+                    const firstMatch = value.match(inputEnvironmentPattern)?.[0];
+                    if (firstMatch === undefined) {
+                        return;
+                    }
+                    context.report({
+                        data: {
+                            inputEnvironmentReference: firstMatch,
+                        },
+                        messageId: "compositeInputEnvAccess",
+                        node: node,
+                    });
+                });
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.actionMetadata",
+                "github-actions.configs.all",
+            ],
+            description: "disallow `INPUT_*` environment-variable access in composite actions and require `inputs.*` context references.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R049",
+            ruleNumber: 49,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-composite-input-env-access",
+        },
+        messages: {
+            compositeInputEnvAccess: "Composite actions should reference inputs via `inputs.*`, not environment variable '{{inputEnvironmentReference}}'.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-composite-input-env-access.js.map

package/dist/rules/no-composite-input-env-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-composite-input-env-access.js","sourceRoot":"","sources":["../../src/rules/no-composite-input-env-access.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACH,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE,wEAAwE;AACxE,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AAEvD,mEAAmE;AACnE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1C,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACtC,MAAM,WAAW,GACb,IAAI,KAAK,IAAI;oBACT,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAEjD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;oBACvB,OAAO;gBACX,CAAC;gBAED,MAAM,YAAY,GAAG,oBAAoB,CACrC,WAAW,CAAC,KAAK,CAAC,IAAI,CAClB,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,CACvD,EAAE,KAAK,CACX,CAAC;gBAEF,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;oBAC/B,OAAO;gBACX,CAAC;gBAED,sBAAsB,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;oBAChD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAC1B,uBAAuB,CAC1B,EAAE,CAAC,CAAC,CAAC,CAAC;oBAEP,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;wBAC3B,OAAO;oBACX,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,yBAAyB,EAAE,UAAU;yBACxC;wBACD,SAAS,EAAE,yBAAyB;wBACpC,IAAI,EAAE,IAA4B;qBACrC,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,uCAAuC;gBACvC,4BAA4B;aAC/B;YACD,WAAW,EACP,gHAAgH;YACpH,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,sGAAsG;SAC9G;QACD,QAAQ,EAAE;YACN,uBAAuB,EACnB,qHAAqH;SAC5H;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-deprecated-node-runtime.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow deprecated Node.js action runtimes.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for deprecated Node runtime checks in action metadata. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-deprecated-node-runtime.d.ts.map

package/dist/rules/no-deprecated-node-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-deprecated-node-runtime.d.ts","sourceRoot":"","sources":["../../src/rules/no-deprecated-node-runtime.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAYnC,iFAAiF;AACjF,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAgEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-deprecated-node-runtime.js

@@ -0,0 +1,59 @@
+import { isActionMetadataFile } from "../_internal/lint-targets.js";
+import { getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
+/** Deprecated Node runtime values for `runs.using`. */
+const deprecatedNodeRuntimes = new Set(["node12", "node16"]);
+/** Rule implementation for deprecated Node runtime checks in action metadata. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                if (!isActionMetadataFile(context.filename)) {
+                    return;
+                }
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                const runsMapping = getMappingValueAsMapping(root, "runs");
+                if (runsMapping === null) {
+                    return;
+                }
+                const usingPair = runsMapping.pairs.find((pair) => getScalarStringValue(pair.key) === "using");
+                const usingRuntime = getScalarStringValue(usingPair?.value);
+                if (usingRuntime === null ||
+                    !deprecatedNodeRuntimes.has(usingRuntime)) {
+                    return;
+                }
+                context.report({
+                    data: {
+                        runtime: usingRuntime,
+                    },
+                    messageId: "deprecatedNodeRuntime",
+                    node: (usingPair?.value ??
+                        usingPair),
+                });
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.actionMetadata",
+                "github-actions.configs.all",
+            ],
+            description: "disallow deprecated Node.js runtimes in action metadata `runs.using`.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R044",
+            ruleNumber: 44,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-deprecated-node-runtime",
+        },
+        messages: {
+            deprecatedNodeRuntime: "Action metadata uses deprecated runtime `{{runtime}}` for `runs.using`.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-deprecated-node-runtime.js.map

package/dist/rules/no-deprecated-node-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-deprecated-node-runtime.js","sourceRoot":"","sources":["../../src/rules/no-deprecated-node-runtime.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACH,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,uDAAuD;AACvD,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE7D,iFAAiF;AACjF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1C,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAE3D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;oBACvB,OAAO;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CACpC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,CACvD,CAAC;gBACF,MAAM,YAAY,GAAG,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAE5D,IACI,YAAY,KAAK,IAAI;oBACrB,CAAC,sBAAsB,CAAC,GAAG,CAAC,YAAY,CAAC,EAC3C,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,IAAI,EAAE;wBACF,OAAO,EAAE,YAAY;qBACxB;oBACD,SAAS,EAAE,uBAAuB;oBAClC,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK;wBACnB,SAAS,CAAyB;iBACzC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,uCAAuC;gBACvC,4BAA4B;aAC/B;YACD,WAAW,EACP,uEAAuE;YAC3E,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,mGAAmG;SAC3G;QACD,QAAQ,EAAE;YACN,qBAAqB,EACjB,yEAAyE;SAChF;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-duplicate-composite-step-id.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow duplicate step IDs in composite actions.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for duplicate composite step ID checks. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-duplicate-composite-step-id.d.ts.map

package/dist/rules/no-duplicate-composite-step-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-duplicate-composite-step-id.d.ts","sourceRoot":"","sources":["../../src/rules/no-duplicate-composite-step-id.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAYnC,kEAAkE;AAClE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA0FhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-duplicate-composite-step-id.js

@@ -0,0 +1,74 @@
+import { isActionMetadataFile } from "../_internal/lint-targets.js";
+import { getMappingPair, getMappingValueAsMapping, getMappingValueAsSequence, getScalarStringValue, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+/** Rule implementation for duplicate composite step ID checks. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                if (!isActionMetadataFile(context.filename)) {
+                    return;
+                }
+                const root = getWorkflowRoot(context);
+                const runsMapping = root === null
+                    ? null
+                    : getMappingValueAsMapping(root, "runs");
+                if (runsMapping === null) {
+                    return;
+                }
+                const usingRuntime = getScalarStringValue(getMappingPair(runsMapping, "using")?.value);
+                if (usingRuntime !== "composite") {
+                    return;
+                }
+                const stepsSequence = getMappingValueAsSequence(runsMapping, "steps");
+                if (stepsSequence === null) {
+                    return;
+                }
+                const firstSeenByStepId = new Set();
+                for (const stepEntry of stepsSequence.entries) {
+                    const stepMapping = unwrapYamlValue(stepEntry);
+                    if (stepMapping?.type !== "YAMLMapping") {
+                        continue;
+                    }
+                    const stepIdPair = getMappingPair(stepMapping, "id");
+                    const stepId = getScalarStringValue(stepIdPair?.value);
+                    if (stepId === null) {
+                        continue;
+                    }
+                    if (!firstSeenByStepId.has(stepId)) {
+                        firstSeenByStepId.add(stepId);
+                        continue;
+                    }
+                    context.report({
+                        data: {
+                            stepId,
+                        },
+                        messageId: "duplicateCompositeStepId",
+                        node: (stepIdPair?.value ??
+                            stepIdPair),
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.actionMetadata",
+                "github-actions.configs.all",
+            ],
+            description: "disallow duplicate step IDs in `runs.steps` for composite actions.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R051",
+            ruleNumber: 51,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-duplicate-composite-step-id",
+        },
+        messages: {
+            duplicateCompositeStepId: "Composite step id '{{stepId}}' is declared more than once.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-duplicate-composite-step-id.js.map

package/dist/rules/no-duplicate-composite-step-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-duplicate-composite-step-id.js","sourceRoot":"","sources":["../../src/rules/no-duplicate-composite-step-id.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,kEAAkE;AAClE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1C,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACtC,MAAM,WAAW,GACb,IAAI,KAAK,IAAI;oBACT,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAEjD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;oBACvB,OAAO;gBACX,CAAC;gBAED,MAAM,YAAY,GAAG,oBAAoB,CACrC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,KAAK,CAC9C,CAAC;gBAEF,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;oBAC/B,OAAO;gBACX,CAAC;gBAED,MAAM,aAAa,GAAG,yBAAyB,CAC3C,WAAW,EACX,OAAO,CACV,CAAC;gBAEF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;oBACzB,OAAO;gBACX,CAAC;gBAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;gBAE5C,KAAK,MAAM,SAAS,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;oBAC5C,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;oBAE/C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;wBACtC,SAAS;oBACb,CAAC;oBAED,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;oBACrD,MAAM,MAAM,GAAG,oBAAoB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;oBAEvD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;wBAClB,SAAS;oBACb,CAAC;oBAED,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;wBACjC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;wBAE9B,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,MAAM;yBACT;wBACD,SAAS,EAAE,0BAA0B;wBACrC,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK;4BACpB,UAAU,CAAyB;qBAC1C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,uCAAuC;gBACvC,4BAA4B;aAC/B;YACD,WAAW,EACP,oEAAoE;YACxE,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,uGAAuG;SAC/G;QACD,QAAQ,EAAE;YACN,wBAAwB,EACpB,4DAA4D;SACnE;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-empty-template-file-pattern.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow empty or whitespace-only `filePatterns` entries.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for empty template file pattern checks. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-empty-template-file-pattern.d.ts.map

package/dist/rules/no-empty-template-file-pattern.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-empty-template-file-pattern.d.ts","sourceRoot":"","sources":["../../src/rules/no-empty-template-file-pattern.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAQnC,kEAAkE;AAClE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAoDhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-empty-template-file-pattern.js

@@ -0,0 +1,49 @@
+import { isWorkflowTemplatePropertiesFile } from "../_internal/lint-targets.js";
+import { getWorkflowTemplateFilePatternEntries, getWorkflowTemplatePropertiesRoot, } from "../_internal/workflow-template-properties.js";
+/** Rule implementation for empty template file pattern checks. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                if (!isWorkflowTemplatePropertiesFile(context.filename)) {
+                    return;
+                }
+                const root = getWorkflowTemplatePropertiesRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const { node, value, } of getWorkflowTemplateFilePatternEntries(root)) {
+                    if (value.trim().length > 0) {
+                        continue;
+                    }
+                    context.report({
+                        messageId: "emptyTemplateFilePattern",
+                        node: node,
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.workflowTemplateProperties",
+                "github-actions.configs.workflowTemplates",
+                "github-actions.configs.all",
+            ],
+            description: "disallow empty or whitespace-only entries in workflow-template `filePatterns`.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R060",
+            ruleNumber: 60,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-empty-template-file-pattern",
+        },
+        messages: {
+            emptyTemplateFilePattern: "Template `filePatterns` entries must be non-empty regex strings.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-empty-template-file-pattern.js.map

package/dist/rules/no-empty-template-file-pattern.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-empty-template-file-pattern.js","sourceRoot":"","sources":["../../src/rules/no-empty-template-file-pattern.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EACH,qCAAqC,EACrC,iCAAiC,GACpC,MAAM,8CAA8C,CAAC;AAEtD,kEAAkE;AAClE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtD,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;gBAExD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,EACP,IAAI,EACJ,KAAK,GACR,IAAI,qCAAqC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/C,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1B,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,SAAS,EAAE,0BAA0B;wBACrC,IAAI,EAAE,IAA4B;qBACrC,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,mDAAmD;gBACnD,0CAA0C;gBAC1C,4BAA4B;aAC/B;YACD,WAAW,EACP,gFAAgF;YACpF,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,uGAAuG;SAC/G;QACD,QAAQ,EAAE;YACN,wBAAwB,EACpB,kEAAkE;SACzE;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-external-job.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow defining jobs as reusable workflow invocations via `uses`.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for disallowing reusable-workflow jobs. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-external-job.d.ts.map

package/dist/rules/no-external-job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-external-job.d.ts","sourceRoot":"","sources":["../../src/rules/no-external-job.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAQnC,kEAAkE;AAClE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAkDhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-external-job.js

@@ -0,0 +1,49 @@
+import { getMappingPair, getWorkflowJobs, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
+/** Rule implementation for disallowing reusable-workflow jobs. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const job of getWorkflowJobs(root)) {
+                    const usesPair = getMappingPair(job.mapping, "uses");
+                    if (usesPair === null) {
+                        continue;
+                    }
+                    context.report({
+                        data: {
+                            jobId: job.id,
+                        },
+                        messageId: "externalJob",
+                        node: (usesPair.value ??
+                            usesPair),
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.strict",
+            ],
+            description: "disallow reusable-workflow jobs declared with `jobs.<id>.uses` when you want every job defined inline in the workflow file.",
+            recommended: false,
+            requiresTypeChecking: false,
+            ruleId: "R012",
+            ruleNumber: 12,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-external-job",
+        },
+        messages: {
+            externalJob: "Job '{{jobId}}' uses a reusable workflow via `uses`. Define the job inline instead.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-external-job.js.map

package/dist/rules/no-external-job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-external-job.js","sourceRoot":"","sources":["../../src/rules/no-external-job.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,cAAc,EACd,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,kEAAkE;AAClE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAErD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;wBACpB,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,KAAK,EAAE,GAAG,CAAC,EAAE;yBAChB;wBACD,SAAS,EAAE,aAAa;wBACxB,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK;4BACjB,QAAQ,CAAyB;qBACxC,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,6HAA6H;YACjI,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,wFAAwF;SAChG;QACD,QAAQ,EAAE;YACN,WAAW,EACP,qFAAqF;SAC5F;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-hardcoded-default-branch-in-template.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow hardcoded default branch names in workflow templates.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for hardcoded default branch checks in templates. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-hardcoded-default-branch-in-template.d.ts.map

package/dist/rules/no-hardcoded-default-branch-in-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-hardcoded-default-branch-in-template.d.ts","sourceRoot":"","sources":["../../src/rules/no-hardcoded-default-branch-in-template.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AASnC,4EAA4E;AAC5E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAmDhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-hardcoded-default-branch-in-template.js

@@ -0,0 +1,54 @@
+import { isWorkflowTemplateYamlFile } from "../_internal/lint-targets.js";
+import { getWorkflowRoot } from "../_internal/workflow-yaml.js";
+import { visitYamlStringScalars } from "../_internal/yaml-traversal.js";
+/** Branch literals that should be replaced with `$default-branch` in templates. */
+const hardcodedDefaultBranchNames = new Set(["main", "master"]);
+/** Rule implementation for hardcoded default branch checks in templates. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                if (!isWorkflowTemplateYamlFile(context.filename)) {
+                    return;
+                }
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                visitYamlStringScalars(root, (node, value) => {
+                    if (!hardcodedDefaultBranchNames.has(value.trim())) {
+                        return;
+                    }
+                    context.report({
+                        data: {
+                            branchName: value,
+                        },
+                        messageId: "hardcodedDefaultBranch",
+                        node: node,
+                    });
+                });
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.workflowTemplates",
+                "github-actions.configs.all",
+            ],
+            description: "disallow hardcoded `main`/`master` branch literals in workflow template YAML files.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R068",
+            ruleNumber: 68,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-hardcoded-default-branch-in-template",
+        },
+        messages: {
+            hardcodedDefaultBranch: "Template contains hardcoded default branch '{{branchName}}'; prefer `$default-branch` placeholder.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-hardcoded-default-branch-in-template.js.map

package/dist/rules/no-hardcoded-default-branch-in-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-hardcoded-default-branch-in-template.js","sourceRoot":"","sources":["../../src/rules/no-hardcoded-default-branch-in-template.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE,mFAAmF;AACnF,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhE,4EAA4E;AAC5E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAChD,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,sBAAsB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;oBACzC,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;wBACjD,OAAO;oBACX,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,UAAU,EAAE,KAAK;yBACpB;wBACD,SAAS,EAAE,wBAAwB;wBACnC,IAAI,EAAE,IAA4B;qBACrC,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,0CAA0C;gBAC1C,4BAA4B;aAC/B;YACD,WAAW,EACP,qFAAqF;YACzF,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,gHAAgH;SACxH;QACD,QAAQ,EAAE;YACN,sBAAsB,EAClB,oGAAoG;SAC3G;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-icon-file-extension-in-template-icon-name.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow including `.svg` extension in workflow-template `iconName`.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for `iconName` extension checks. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-icon-file-extension-in-template-icon-name.d.ts.map

package/dist/rules/no-icon-file-extension-in-template-icon-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-icon-file-extension-in-template-icon-name.d.ts","sourceRoot":"","sources":["../../src/rules/no-icon-file-extension-in-template-icon-name.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAQnC,2DAA2D;AAC3D,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA2DhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-icon-file-extension-in-template-icon-name.js

@@ -0,0 +1,54 @@
+import { isWorkflowTemplatePropertiesFile } from "../_internal/lint-targets.js";
+import { getWorkflowTemplatePropertiesRoot, getWorkflowTemplateStringProperty, } from "../_internal/workflow-template-properties.js";
+/** Rule implementation for `iconName` extension checks. */
+const rule = {
+    create(context) {
+        return {
+            Program(node) {
+                if (!isWorkflowTemplatePropertiesFile(context.filename)) {
+                    return;
+                }
+                const root = getWorkflowTemplatePropertiesRoot(context);
+                if (root === null) {
+                    return;
+                }
+                const iconName = getWorkflowTemplateStringProperty(root, "iconName");
+                if (iconName === null) {
+                    return;
+                }
+                if (!iconName.toLowerCase().endsWith(".svg")) {
+                    return;
+                }
+                context.report({
+                    data: {
+                        iconName,
+                    },
+                    messageId: "iconNameIncludesExtension",
+                    node: node,
+                });
+            },
+        };
+    },
+    meta: {
+        docs: {
+            configs: [
+                "github-actions.configs.workflowTemplateProperties",
+                "github-actions.configs.workflowTemplates",
+                "github-actions.configs.all",
+            ],
+            description: "disallow `.svg` extensions in workflow-template `iconName` values.",
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R063",
+            ruleNumber: 63,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/no-icon-file-extension-in-template-icon-name",
+        },
+        messages: {
+            iconNameIncludesExtension: "Template `iconName` '{{iconName}}' should omit the `.svg` extension.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=no-icon-file-extension-in-template-icon-name.js.map

package/dist/rules/no-icon-file-extension-in-template-icon-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-icon-file-extension-in-template-icon-name.js","sourceRoot":"","sources":["../../src/rules/no-icon-file-extension-in-template-icon-name.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EACH,iCAAiC,EACjC,iCAAiC,GACpC,MAAM,8CAA8C,CAAC;AAEtD,2DAA2D;AAC3D,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO,CAAC,IAAI;gBACR,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtD,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;gBAExD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,QAAQ,GAAG,iCAAiC,CAC9C,IAAI,EACJ,UAAU,CACb,CAAC;gBAEF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACpB,OAAO;gBACX,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC3C,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,IAAI,EAAE;wBACF,QAAQ;qBACX;oBACD,SAAS,EAAE,2BAA2B;oBACtC,IAAI,EAAE,IAA4B;iBACrC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,mDAAmD;gBACnD,0CAA0C;gBAC1C,4BAA4B;aAC/B;YACD,WAAW,EACP,oEAAoE;YACxE,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,qHAAqH;SAC7H;QACD,QAAQ,EAAE;YACN,yBAAyB,EACrB,sEAAsE;SAC7E;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/no-inherit-secrets.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Disallow broad reusable-workflow secret inheritance.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for disallowing reusable-workflow `secrets: inherit`. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=no-inherit-secrets.d.ts.map

package/dist/rules/no-inherit-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-inherit-secrets.d.ts","sourceRoot":"","sources":["../../src/rules/no-inherit-secrets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAoBnC,gFAAgF;AAChF,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAyDhB,CAAC;AAEF,eAAe,IAAI,CAAC"}