eslint-plugin-github-actions-2 1.0.2 → 1.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +149 -101
- package/dist/_internal/code-scanning-workflow.d.ts +37 -0
- package/dist/_internal/code-scanning-workflow.d.ts.map +1 -0
- package/dist/_internal/code-scanning-workflow.js +73 -0
- package/dist/_internal/code-scanning-workflow.js.map +1 -0
- package/dist/_internal/dependabot-automation-workflow.d.ts +26 -0
- package/dist/_internal/dependabot-automation-workflow.d.ts.map +1 -0
- package/dist/_internal/dependabot-automation-workflow.js +25 -0
- package/dist/_internal/dependabot-automation-workflow.js.map +1 -0
- package/dist/_internal/dependabot-yaml.d.ts +63 -0
- package/dist/_internal/dependabot-yaml.d.ts.map +1 -0
- package/dist/_internal/dependabot-yaml.js +139 -0
- package/dist/_internal/dependabot-yaml.js.map +1 -0
- package/dist/_internal/dependency-review-workflow.d.ts +20 -0
- package/dist/_internal/dependency-review-workflow.d.ts.map +1 -0
- package/dist/_internal/dependency-review-workflow.js +9 -0
- package/dist/_internal/dependency-review-workflow.js.map +1 -0
- package/dist/_internal/github-actions-config-references.d.ts +1 -1
- package/dist/_internal/github-actions-config-references.d.ts.map +1 -1
- package/dist/_internal/github-actions-config-references.js +19 -2
- package/dist/_internal/github-actions-config-references.js.map +1 -1
- package/dist/_internal/lint-targets.d.ts +8 -0
- package/dist/_internal/lint-targets.d.ts.map +1 -1
- package/dist/_internal/lint-targets.js +26 -0
- package/dist/_internal/lint-targets.js.map +1 -1
- package/dist/_internal/rules-registry.d.ts +90 -0
- package/dist/_internal/rules-registry.d.ts.map +1 -1
- package/dist/_internal/rules-registry.js +90 -0
- package/dist/_internal/rules-registry.js.map +1 -1
- package/dist/_internal/secret-scanning-workflow.d.ts +24 -0
- package/dist/_internal/secret-scanning-workflow.d.ts.map +1 -0
- package/dist/_internal/secret-scanning-workflow.js +21 -0
- package/dist/_internal/secret-scanning-workflow.js.map +1 -0
- package/dist/_internal/workflow-action-steps.d.ts +35 -0
- package/dist/_internal/workflow-action-steps.d.ts.map +1 -0
- package/dist/_internal/workflow-action-steps.js +75 -0
- package/dist/_internal/workflow-action-steps.js.map +1 -0
- package/dist/_internal/workflow-permissions.d.ts +11 -0
- package/dist/_internal/workflow-permissions.d.ts.map +1 -0
- package/dist/_internal/workflow-permissions.js +50 -0
- package/dist/_internal/workflow-permissions.js.map +1 -0
- package/dist/_internal/yaml-fixes.d.ts +13 -0
- package/dist/_internal/yaml-fixes.d.ts.map +1 -0
- package/dist/_internal/yaml-fixes.js +77 -0
- package/dist/_internal/yaml-fixes.js.map +1 -0
- package/dist/plugin.cjs +3524 -292
- package/dist/plugin.cjs.map +4 -4
- package/dist/plugin.d.ts.map +1 -1
- package/dist/plugin.js +2 -0
- package/dist/plugin.js.map +1 -1
- package/dist/rules/action-name-casing.d.ts.map +1 -1
- package/dist/rules/action-name-casing.js +3 -0
- package/dist/rules/action-name-casing.js.map +1 -1
- package/dist/rules/job-id-casing.d.ts.map +1 -1
- package/dist/rules/job-id-casing.js +3 -0
- package/dist/rules/job-id-casing.js.map +1 -1
- package/dist/rules/max-jobs-per-action.d.ts.map +1 -1
- package/dist/rules/max-jobs-per-action.js +3 -0
- package/dist/rules/max-jobs-per-action.js.map +1 -1
- package/dist/rules/no-case-insensitive-input-id-collision.d.ts.map +1 -1
- package/dist/rules/no-case-insensitive-input-id-collision.js +3 -0
- package/dist/rules/no-case-insensitive-input-id-collision.js.map +1 -1
- package/dist/rules/no-codeql-autobuild-for-javascript-typescript.d.ts +9 -0
- package/dist/rules/no-codeql-autobuild-for-javascript-typescript.d.ts.map +1 -0
- package/dist/rules/no-codeql-autobuild-for-javascript-typescript.js +54 -0
- package/dist/rules/no-codeql-autobuild-for-javascript-typescript.js.map +1 -0
- package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.d.ts +9 -0
- package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.d.ts.map +1 -0
- package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.js +50 -0
- package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.js.map +1 -0
- package/dist/rules/no-composite-input-env-access.d.ts.map +1 -1
- package/dist/rules/no-composite-input-env-access.js +3 -0
- package/dist/rules/no-composite-input-env-access.js.map +1 -1
- package/dist/rules/no-deprecated-node-runtime.d.ts.map +1 -1
- package/dist/rules/no-deprecated-node-runtime.js +3 -0
- package/dist/rules/no-deprecated-node-runtime.js.map +1 -1
- package/dist/rules/no-duplicate-composite-step-id.d.ts.map +1 -1
- package/dist/rules/no-duplicate-composite-step-id.js +3 -0
- package/dist/rules/no-duplicate-composite-step-id.js.map +1 -1
- package/dist/rules/no-empty-template-file-pattern.d.ts.map +1 -1
- package/dist/rules/no-empty-template-file-pattern.js +6 -0
- package/dist/rules/no-empty-template-file-pattern.js.map +1 -1
- package/dist/rules/no-external-job.d.ts.map +1 -1
- package/dist/rules/no-external-job.js +3 -0
- package/dist/rules/no-external-job.js.map +1 -1
- package/dist/rules/no-hardcoded-default-branch-in-template.d.ts.map +1 -1
- package/dist/rules/no-hardcoded-default-branch-in-template.js +3 -0
- package/dist/rules/no-hardcoded-default-branch-in-template.js.map +1 -1
- package/dist/rules/no-icon-file-extension-in-template-icon-name.d.ts.map +1 -1
- package/dist/rules/no-icon-file-extension-in-template-icon-name.js +13 -3
- package/dist/rules/no-icon-file-extension-in-template-icon-name.js.map +1 -1
- package/dist/rules/no-inherit-secrets.d.ts.map +1 -1
- package/dist/rules/no-inherit-secrets.js +3 -0
- package/dist/rules/no-inherit-secrets.js.map +1 -1
- package/dist/rules/no-invalid-concurrency-context.d.ts.map +1 -1
- package/dist/rules/no-invalid-concurrency-context.js +3 -0
- package/dist/rules/no-invalid-concurrency-context.js.map +1 -1
- package/dist/rules/no-invalid-key.d.ts.map +1 -1
- package/dist/rules/no-invalid-key.js +3 -0
- package/dist/rules/no-invalid-key.js.map +1 -1
- package/dist/rules/no-invalid-reusable-workflow-job-key.d.ts.map +1 -1
- package/dist/rules/no-invalid-reusable-workflow-job-key.js +3 -0
- package/dist/rules/no-invalid-reusable-workflow-job-key.js.map +1 -1
- package/dist/rules/no-invalid-template-file-pattern-regex.d.ts.map +1 -1
- package/dist/rules/no-invalid-template-file-pattern-regex.js +3 -0
- package/dist/rules/no-invalid-template-file-pattern-regex.js.map +1 -1
- package/dist/rules/no-invalid-workflow-call-output-value.d.ts.map +1 -1
- package/dist/rules/no-invalid-workflow-call-output-value.js +3 -0
- package/dist/rules/no-invalid-workflow-call-output-value.js.map +1 -1
- package/dist/rules/no-overlapping-dependabot-directories.d.ts +9 -0
- package/dist/rules/no-overlapping-dependabot-directories.d.ts.map +1 -0
- package/dist/rules/no-overlapping-dependabot-directories.js +151 -0
- package/dist/rules/no-overlapping-dependabot-directories.js.map +1 -0
- package/dist/rules/no-path-separators-in-template-icon-name.d.ts.map +1 -1
- package/dist/rules/no-path-separators-in-template-icon-name.js +26 -3
- package/dist/rules/no-path-separators-in-template-icon-name.js.map +1 -1
- package/dist/rules/no-post-if-without-post.d.ts.map +1 -1
- package/dist/rules/no-post-if-without-post.js +6 -0
- package/dist/rules/no-post-if-without-post.js.map +1 -1
- package/dist/rules/no-pr-head-checkout-in-pull-request-target.d.ts.map +1 -1
- package/dist/rules/no-pr-head-checkout-in-pull-request-target.js +3 -0
- package/dist/rules/no-pr-head-checkout-in-pull-request-target.js.map +1 -1
- package/dist/rules/no-pre-if-without-pre.d.ts.map +1 -1
- package/dist/rules/no-pre-if-without-pre.js +6 -0
- package/dist/rules/no-pre-if-without-pre.js.map +1 -1
- package/dist/rules/no-required-input-with-default.d.ts.map +1 -1
- package/dist/rules/no-required-input-with-default.js +23 -0
- package/dist/rules/no-required-input-with-default.js.map +1 -1
- package/dist/rules/no-secrets-in-if.d.ts.map +1 -1
- package/dist/rules/no-secrets-in-if.js +3 -0
- package/dist/rules/no-secrets-in-if.js.map +1 -1
- package/dist/rules/no-self-hosted-runner-on-fork-pr-events.d.ts.map +1 -1
- package/dist/rules/no-self-hosted-runner-on-fork-pr-events.js +3 -0
- package/dist/rules/no-self-hosted-runner-on-fork-pr-events.js.map +1 -1
- package/dist/rules/no-subdirectory-template-file-pattern.d.ts.map +1 -1
- package/dist/rules/no-subdirectory-template-file-pattern.js +3 -0
- package/dist/rules/no-subdirectory-template-file-pattern.js.map +1 -1
- package/dist/rules/no-template-placeholder-in-non-template-workflow.d.ts.map +1 -1
- package/dist/rules/no-template-placeholder-in-non-template-workflow.js +3 -0
- package/dist/rules/no-template-placeholder-in-non-template-workflow.js.map +1 -1
- package/dist/rules/no-top-level-env.d.ts.map +1 -1
- package/dist/rules/no-top-level-env.js +3 -0
- package/dist/rules/no-top-level-env.js.map +1 -1
- package/dist/rules/no-top-level-permissions.d.ts.map +1 -1
- package/dist/rules/no-top-level-permissions.js +3 -0
- package/dist/rules/no-top-level-permissions.js.map +1 -1
- package/dist/rules/no-universal-template-file-pattern.d.ts.map +1 -1
- package/dist/rules/no-universal-template-file-pattern.js +3 -0
- package/dist/rules/no-universal-template-file-pattern.js.map +1 -1
- package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.d.ts +9 -0
- package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.d.ts.map +1 -0
- package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.js +58 -0
- package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.js.map +1 -0
- package/dist/rules/no-unknown-input-reference-in-composite.d.ts.map +1 -1
- package/dist/rules/no-unknown-input-reference-in-composite.js +3 -0
- package/dist/rules/no-unknown-input-reference-in-composite.js.map +1 -1
- package/dist/rules/no-unknown-job-output-reference.d.ts.map +1 -1
- package/dist/rules/no-unknown-job-output-reference.js +3 -0
- package/dist/rules/no-unknown-job-output-reference.js.map +1 -1
- package/dist/rules/no-unknown-step-reference.d.ts.map +1 -1
- package/dist/rules/no-unknown-step-reference.js +3 -0
- package/dist/rules/no-unknown-step-reference.js.map +1 -1
- package/dist/rules/no-untrusted-input-in-run.d.ts.map +1 -1
- package/dist/rules/no-untrusted-input-in-run.js +3 -0
- package/dist/rules/no-untrusted-input-in-run.js.map +1 -1
- package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.d.ts +9 -0
- package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.d.ts.map +1 -0
- package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.js +51 -0
- package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.js.map +1 -0
- package/dist/rules/no-unused-input-in-composite.d.ts.map +1 -1
- package/dist/rules/no-unused-input-in-composite.js +3 -0
- package/dist/rules/no-unused-input-in-composite.js.map +1 -1
- package/dist/rules/no-write-all-permissions.d.ts.map +1 -1
- package/dist/rules/no-write-all-permissions.js +3 -0
- package/dist/rules/no-write-all-permissions.js.map +1 -1
- package/dist/rules/pin-action-shas.d.ts.map +1 -1
- package/dist/rules/pin-action-shas.js +3 -0
- package/dist/rules/pin-action-shas.js.map +1 -1
- package/dist/rules/prefer-action-yml.d.ts.map +1 -1
- package/dist/rules/prefer-action-yml.js +3 -0
- package/dist/rules/prefer-action-yml.js.map +1 -1
- package/dist/rules/prefer-fail-fast.d.ts.map +1 -1
- package/dist/rules/prefer-fail-fast.js +3 -0
- package/dist/rules/prefer-fail-fast.js.map +1 -1
- package/dist/rules/prefer-file-extension.d.ts.map +1 -1
- package/dist/rules/prefer-file-extension.js +3 -0
- package/dist/rules/prefer-file-extension.js.map +1 -1
- package/dist/rules/prefer-inputs-context.d.ts.map +1 -1
- package/dist/rules/prefer-inputs-context.js +3 -0
- package/dist/rules/prefer-inputs-context.js.map +1 -1
- package/dist/rules/prefer-step-uses-style.d.ts.map +1 -1
- package/dist/rules/prefer-step-uses-style.js +3 -0
- package/dist/rules/prefer-step-uses-style.js.map +1 -1
- package/dist/rules/prefer-template-yml-extension.d.ts.map +1 -1
- package/dist/rules/prefer-template-yml-extension.js +3 -0
- package/dist/rules/prefer-template-yml-extension.js.map +1 -1
- package/dist/rules/require-action-name.d.ts.map +1 -1
- package/dist/rules/require-action-name.js +3 -0
- package/dist/rules/require-action-name.js.map +1 -1
- package/dist/rules/require-action-run-name.d.ts.map +1 -1
- package/dist/rules/require-action-run-name.js +3 -0
- package/dist/rules/require-action-run-name.js.map +1 -1
- package/dist/rules/require-checkout-before-local-action.d.ts.map +1 -1
- package/dist/rules/require-checkout-before-local-action.js +3 -0
- package/dist/rules/require-checkout-before-local-action.js.map +1 -1
- package/dist/rules/require-codeql-actions-read.d.ts +9 -0
- package/dist/rules/require-codeql-actions-read.d.ts.map +1 -0
- package/dist/rules/require-codeql-actions-read.js +63 -0
- package/dist/rules/require-codeql-actions-read.js.map +1 -0
- package/dist/rules/require-codeql-branch-filters.d.ts +12 -0
- package/dist/rules/require-codeql-branch-filters.d.ts.map +1 -0
- package/dist/rules/require-codeql-branch-filters.js +83 -0
- package/dist/rules/require-codeql-branch-filters.js.map +1 -0
- package/dist/rules/require-codeql-category-when-language-matrix.d.ts +12 -0
- package/dist/rules/require-codeql-category-when-language-matrix.d.ts.map +1 -0
- package/dist/rules/require-codeql-category-when-language-matrix.js +68 -0
- package/dist/rules/require-codeql-category-when-language-matrix.js.map +1 -0
- package/dist/rules/require-codeql-pull-request-trigger.d.ts +9 -0
- package/dist/rules/require-codeql-pull-request-trigger.d.ts.map +1 -0
- package/dist/rules/require-codeql-pull-request-trigger.js +46 -0
- package/dist/rules/require-codeql-pull-request-trigger.js.map +1 -0
- package/dist/rules/require-codeql-schedule.d.ts +9 -0
- package/dist/rules/require-codeql-schedule.d.ts.map +1 -0
- package/dist/rules/require-codeql-schedule.js +46 -0
- package/dist/rules/require-codeql-schedule.js.map +1 -0
- package/dist/rules/require-codeql-security-events-write.d.ts +9 -0
- package/dist/rules/require-codeql-security-events-write.d.ts.map +1 -0
- package/dist/rules/require-codeql-security-events-write.js +53 -0
- package/dist/rules/require-codeql-security-events-write.js.map +1 -0
- package/dist/rules/require-composite-step-name.d.ts.map +1 -1
- package/dist/rules/require-composite-step-name.js +3 -0
- package/dist/rules/require-composite-step-name.js.map +1 -1
- package/dist/rules/require-dependabot-assignees.d.ts +9 -0
- package/dist/rules/require-dependabot-assignees.d.ts.map +1 -0
- package/dist/rules/require-dependabot-assignees.js +53 -0
- package/dist/rules/require-dependabot-assignees.js.map +1 -0
- package/dist/rules/require-dependabot-automation-permissions.d.ts +9 -0
- package/dist/rules/require-dependabot-automation-permissions.d.ts.map +1 -0
- package/dist/rules/require-dependabot-automation-permissions.js +68 -0
- package/dist/rules/require-dependabot-automation-permissions.js.map +1 -0
- package/dist/rules/require-dependabot-automation-pull-request-trigger.d.ts +12 -0
- package/dist/rules/require-dependabot-automation-pull-request-trigger.d.ts.map +1 -0
- package/dist/rules/require-dependabot-automation-pull-request-trigger.js +49 -0
- package/dist/rules/require-dependabot-automation-pull-request-trigger.js.map +1 -0
- package/dist/rules/require-dependabot-bot-actor-guard.d.ts +9 -0
- package/dist/rules/require-dependabot-bot-actor-guard.d.ts.map +1 -0
- package/dist/rules/require-dependabot-bot-actor-guard.js +64 -0
- package/dist/rules/require-dependabot-bot-actor-guard.js.map +1 -0
- package/dist/rules/require-dependabot-commit-message-include-scope.d.ts +9 -0
- package/dist/rules/require-dependabot-commit-message-include-scope.d.ts.map +1 -0
- package/dist/rules/require-dependabot-commit-message-include-scope.js +60 -0
- package/dist/rules/require-dependabot-commit-message-include-scope.js.map +1 -0
- package/dist/rules/require-dependabot-commit-message-prefix-development.d.ts +9 -0
- package/dist/rules/require-dependabot-commit-message-prefix-development.d.ts.map +1 -0
- package/dist/rules/require-dependabot-commit-message-prefix-development.js +75 -0
- package/dist/rules/require-dependabot-commit-message-prefix-development.js.map +1 -0
- package/dist/rules/require-dependabot-commit-message-prefix.d.ts +9 -0
- package/dist/rules/require-dependabot-commit-message-prefix.d.ts.map +1 -0
- package/dist/rules/require-dependabot-commit-message-prefix.js +60 -0
- package/dist/rules/require-dependabot-commit-message-prefix.js.map +1 -0
- package/dist/rules/require-dependabot-cooldown.d.ts +9 -0
- package/dist/rules/require-dependabot-cooldown.d.ts.map +1 -0
- package/dist/rules/require-dependabot-cooldown.js +52 -0
- package/dist/rules/require-dependabot-cooldown.js.map +1 -0
- package/dist/rules/require-dependabot-directory.d.ts +9 -0
- package/dist/rules/require-dependabot-directory.d.ts.map +1 -0
- package/dist/rules/require-dependabot-directory.js +68 -0
- package/dist/rules/require-dependabot-directory.js.map +1 -0
- package/dist/rules/require-dependabot-github-actions-directory-root.d.ts +9 -0
- package/dist/rules/require-dependabot-github-actions-directory-root.d.ts.map +1 -0
- package/dist/rules/require-dependabot-github-actions-directory-root.js +76 -0
- package/dist/rules/require-dependabot-github-actions-directory-root.js.map +1 -0
- package/dist/rules/require-dependabot-labels.d.ts +9 -0
- package/dist/rules/require-dependabot-labels.d.ts.map +1 -0
- package/dist/rules/require-dependabot-labels.js +52 -0
- package/dist/rules/require-dependabot-labels.js.map +1 -0
- package/dist/rules/require-dependabot-open-pull-requests-limit.d.ts +9 -0
- package/dist/rules/require-dependabot-open-pull-requests-limit.d.ts.map +1 -0
- package/dist/rules/require-dependabot-open-pull-requests-limit.js +55 -0
- package/dist/rules/require-dependabot-open-pull-requests-limit.js.map +1 -0
- package/dist/rules/require-dependabot-package-ecosystem.d.ts +9 -0
- package/dist/rules/require-dependabot-package-ecosystem.d.ts.map +1 -0
- package/dist/rules/require-dependabot-package-ecosystem.js +79 -0
- package/dist/rules/require-dependabot-package-ecosystem.js.map +1 -0
- package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.d.ts +9 -0
- package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.d.ts.map +1 -0
- package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.js +58 -0
- package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.js.map +1 -0
- package/dist/rules/require-dependabot-schedule-cronjob.d.ts +9 -0
- package/dist/rules/require-dependabot-schedule-cronjob.d.ts.map +1 -0
- package/dist/rules/require-dependabot-schedule-cronjob.js +82 -0
- package/dist/rules/require-dependabot-schedule-cronjob.js.map +1 -0
- package/dist/rules/require-dependabot-schedule-interval.d.ts +9 -0
- package/dist/rules/require-dependabot-schedule-interval.d.ts.map +1 -0
- package/dist/rules/require-dependabot-schedule-interval.js +73 -0
- package/dist/rules/require-dependabot-schedule-interval.js.map +1 -0
- package/dist/rules/require-dependabot-schedule-time.d.ts +9 -0
- package/dist/rules/require-dependabot-schedule-time.d.ts.map +1 -0
- package/dist/rules/require-dependabot-schedule-time.js +68 -0
- package/dist/rules/require-dependabot-schedule-time.js.map +1 -0
- package/dist/rules/require-dependabot-schedule-timezone.d.ts +9 -0
- package/dist/rules/require-dependabot-schedule-timezone.d.ts.map +1 -0
- package/dist/rules/require-dependabot-schedule-timezone.js +69 -0
- package/dist/rules/require-dependabot-schedule-timezone.js.map +1 -0
- package/dist/rules/require-dependabot-target-branch.d.ts +9 -0
- package/dist/rules/require-dependabot-target-branch.d.ts.map +1 -0
- package/dist/rules/require-dependabot-target-branch.js +53 -0
- package/dist/rules/require-dependabot-target-branch.js.map +1 -0
- package/dist/rules/require-dependabot-updates.d.ts +9 -0
- package/dist/rules/require-dependabot-updates.d.ts.map +1 -0
- package/dist/rules/require-dependabot-updates.js +54 -0
- package/dist/rules/require-dependabot-updates.js.map +1 -0
- package/dist/rules/require-dependabot-version.d.ts +9 -0
- package/dist/rules/require-dependabot-version.d.ts.map +1 -0
- package/dist/rules/require-dependabot-version.js +62 -0
- package/dist/rules/require-dependabot-version.js.map +1 -0
- package/dist/rules/require-dependabot-versioning-strategy-for-npm.d.ts +9 -0
- package/dist/rules/require-dependabot-versioning-strategy-for-npm.d.ts.map +1 -0
- package/dist/rules/require-dependabot-versioning-strategy-for-npm.js +58 -0
- package/dist/rules/require-dependabot-versioning-strategy-for-npm.js.map +1 -0
- package/dist/rules/require-dependency-review-action.d.ts +9 -0
- package/dist/rules/require-dependency-review-action.d.ts.map +1 -0
- package/dist/rules/require-dependency-review-action.js +51 -0
- package/dist/rules/require-dependency-review-action.js.map +1 -0
- package/dist/rules/require-dependency-review-fail-on-severity.d.ts +9 -0
- package/dist/rules/require-dependency-review-fail-on-severity.d.ts.map +1 -0
- package/dist/rules/require-dependency-review-fail-on-severity.js +62 -0
- package/dist/rules/require-dependency-review-fail-on-severity.js.map +1 -0
- package/dist/rules/require-dependency-review-permissions-contents-read.d.ts +9 -0
- package/dist/rules/require-dependency-review-permissions-contents-read.d.ts.map +1 -0
- package/dist/rules/require-dependency-review-permissions-contents-read.js +55 -0
- package/dist/rules/require-dependency-review-permissions-contents-read.js.map +1 -0
- package/dist/rules/require-dependency-review-pull-request-trigger.d.ts +9 -0
- package/dist/rules/require-dependency-review-pull-request-trigger.d.ts.map +1 -0
- package/dist/rules/require-dependency-review-pull-request-trigger.js +47 -0
- package/dist/rules/require-dependency-review-pull-request-trigger.js.map +1 -0
- package/dist/rules/require-fetch-metadata-github-token.d.ts +9 -0
- package/dist/rules/require-fetch-metadata-github-token.d.ts.map +1 -0
- package/dist/rules/require-fetch-metadata-github-token.js +57 -0
- package/dist/rules/require-fetch-metadata-github-token.js.map +1 -0
- package/dist/rules/require-job-name.d.ts.map +1 -1
- package/dist/rules/require-job-name.js +35 -0
- package/dist/rules/require-job-name.js.map +1 -1
- package/dist/rules/require-job-step-name.d.ts.map +1 -1
- package/dist/rules/require-job-step-name.js +76 -0
- package/dist/rules/require-job-step-name.js.map +1 -1
- package/dist/rules/require-job-timeout-minutes.d.ts.map +1 -1
- package/dist/rules/require-job-timeout-minutes.js +3 -0
- package/dist/rules/require-job-timeout-minutes.js.map +1 -1
- package/dist/rules/require-merge-group-trigger.d.ts.map +1 -1
- package/dist/rules/require-merge-group-trigger.js +3 -0
- package/dist/rules/require-merge-group-trigger.js.map +1 -1
- package/dist/rules/require-pull-request-target-branches.d.ts.map +1 -1
- package/dist/rules/require-pull-request-target-branches.js +3 -0
- package/dist/rules/require-pull-request-target-branches.js.map +1 -1
- package/dist/rules/require-run-step-shell.d.ts.map +1 -1
- package/dist/rules/require-run-step-shell.js +3 -0
- package/dist/rules/require-run-step-shell.js.map +1 -1
- package/dist/rules/require-sarif-upload-security-events-write.d.ts +9 -0
- package/dist/rules/require-sarif-upload-security-events-write.d.ts.map +1 -0
- package/dist/rules/require-sarif-upload-security-events-write.js +51 -0
- package/dist/rules/require-sarif-upload-security-events-write.js.map +1 -0
- package/dist/rules/require-scorecard-results-format-sarif.d.ts +9 -0
- package/dist/rules/require-scorecard-results-format-sarif.d.ts.map +1 -0
- package/dist/rules/require-scorecard-results-format-sarif.js +57 -0
- package/dist/rules/require-scorecard-results-format-sarif.js.map +1 -0
- package/dist/rules/require-scorecard-upload-sarif-step.d.ts +9 -0
- package/dist/rules/require-scorecard-upload-sarif-step.d.ts.map +1 -0
- package/dist/rules/require-scorecard-upload-sarif-step.js +46 -0
- package/dist/rules/require-scorecard-upload-sarif-step.js.map +1 -0
- package/dist/rules/require-secret-scan-contents-read.d.ts +12 -0
- package/dist/rules/require-secret-scan-contents-read.d.ts.map +1 -0
- package/dist/rules/require-secret-scan-contents-read.js +53 -0
- package/dist/rules/require-secret-scan-contents-read.js.map +1 -0
- package/dist/rules/require-secret-scan-fetch-depth-zero.d.ts +9 -0
- package/dist/rules/require-secret-scan-fetch-depth-zero.d.ts.map +1 -0
- package/dist/rules/require-secret-scan-fetch-depth-zero.js +77 -0
- package/dist/rules/require-secret-scan-fetch-depth-zero.js.map +1 -0
- package/dist/rules/require-secret-scan-schedule.d.ts +9 -0
- package/dist/rules/require-secret-scan-schedule.d.ts.map +1 -0
- package/dist/rules/require-secret-scan-schedule.js +46 -0
- package/dist/rules/require-secret-scan-schedule.js.map +1 -0
- package/dist/rules/require-template-categories.d.ts.map +1 -1
- package/dist/rules/require-template-categories.js +3 -0
- package/dist/rules/require-template-categories.js.map +1 -1
- package/dist/rules/require-template-file-patterns.d.ts.map +1 -1
- package/dist/rules/require-template-file-patterns.js +3 -0
- package/dist/rules/require-template-file-patterns.js.map +1 -1
- package/dist/rules/require-template-icon-file-exists.d.ts.map +1 -1
- package/dist/rules/require-template-icon-file-exists.js +3 -0
- package/dist/rules/require-template-icon-file-exists.js.map +1 -1
- package/dist/rules/require-template-icon-name.d.ts.map +1 -1
- package/dist/rules/require-template-icon-name.js +3 -0
- package/dist/rules/require-template-icon-name.js.map +1 -1
- package/dist/rules/require-template-workflow-name.d.ts.map +1 -1
- package/dist/rules/require-template-workflow-name.js +3 -0
- package/dist/rules/require-template-workflow-name.js.map +1 -1
- package/dist/rules/require-trigger-types.d.ts.map +1 -1
- package/dist/rules/require-trigger-types.js +3 -0
- package/dist/rules/require-trigger-types.js.map +1 -1
- package/dist/rules/require-trufflehog-verified-results-mode.d.ts +9 -0
- package/dist/rules/require-trufflehog-verified-results-mode.d.ts.map +1 -0
- package/dist/rules/require-trufflehog-verified-results-mode.js +59 -0
- package/dist/rules/require-trufflehog-verified-results-mode.js.map +1 -0
- package/dist/rules/require-workflow-call-input-type.d.ts.map +1 -1
- package/dist/rules/require-workflow-call-input-type.js +3 -0
- package/dist/rules/require-workflow-call-input-type.js.map +1 -1
- package/dist/rules/require-workflow-call-output-value.d.ts.map +1 -1
- package/dist/rules/require-workflow-call-output-value.js +3 -0
- package/dist/rules/require-workflow-call-output-value.js.map +1 -1
- package/dist/rules/require-workflow-concurrency.d.ts.map +1 -1
- package/dist/rules/require-workflow-concurrency.js +3 -0
- package/dist/rules/require-workflow-concurrency.js.map +1 -1
- package/dist/rules/require-workflow-dispatch-input-type.d.ts.map +1 -1
- package/dist/rules/require-workflow-dispatch-input-type.js +3 -0
- package/dist/rules/require-workflow-dispatch-input-type.js.map +1 -1
- package/dist/rules/require-workflow-interface-description.d.ts.map +1 -1
- package/dist/rules/require-workflow-interface-description.js +3 -0
- package/dist/rules/require-workflow-interface-description.js.map +1 -1
- package/dist/rules/require-workflow-permissions.d.ts.map +1 -1
- package/dist/rules/require-workflow-permissions.js +3 -0
- package/dist/rules/require-workflow-permissions.js.map +1 -1
- package/dist/rules/require-workflow-run-branches.d.ts.map +1 -1
- package/dist/rules/require-workflow-run-branches.js +3 -0
- package/dist/rules/require-workflow-run-branches.js.map +1 -1
- package/dist/rules/require-workflow-template-pair.d.ts.map +1 -1
- package/dist/rules/require-workflow-template-pair.js +3 -0
- package/dist/rules/require-workflow-template-pair.js.map +1 -1
- package/dist/rules/require-workflow-template-properties-pair.d.ts.map +1 -1
- package/dist/rules/require-workflow-template-properties-pair.js +3 -0
- package/dist/rules/require-workflow-template-properties-pair.js.map +1 -1
- package/dist/rules/valid-timeout-minutes.d.ts.map +1 -1
- package/dist/rules/valid-timeout-minutes.js +3 -0
- package/dist/rules/valid-timeout-minutes.js.map +1 -1
- package/dist/rules/valid-trigger-events.d.ts.map +1 -1
- package/dist/rules/valid-trigger-events.js +3 -0
- package/dist/rules/valid-trigger-events.js.map +1 -1
- package/docs/rules/action-name-casing.md +6 -2
- package/docs/rules/no-codeql-autobuild-for-javascript-typescript.md +55 -0
- package/docs/rules/no-codeql-javascript-typescript-split-language-matrix.md +51 -0
- package/docs/rules/no-empty-template-file-pattern.md +5 -1
- package/docs/rules/no-icon-file-extension-in-template-icon-name.md +5 -1
- package/docs/rules/no-overlapping-dependabot-directories.md +87 -0
- package/docs/rules/no-path-separators-in-template-icon-name.md +5 -1
- package/docs/rules/no-post-if-without-post.md +5 -1
- package/docs/rules/no-pre-if-without-pre.md +5 -1
- package/docs/rules/no-required-input-with-default.md +10 -1
- package/docs/rules/no-unknown-dependabot-multi-ecosystem-group.md +62 -0
- package/docs/rules/no-unused-dependabot-enable-beta-ecosystems.md +63 -0
- package/docs/rules/overview.md +47 -1
- package/docs/rules/prefer-inputs-context.md +6 -2
- package/docs/rules/presets/action-metadata.md +22 -11
- package/docs/rules/presets/all.md +125 -69
- package/docs/rules/presets/code-scanning.md +33 -0
- package/docs/rules/presets/dependabot.md +40 -0
- package/docs/rules/presets/index.md +139 -81
- package/docs/rules/presets/recommended.md +30 -19
- package/docs/rules/presets/security.md +35 -9
- package/docs/rules/presets/strict.md +52 -41
- package/docs/rules/presets/workflow-template-properties.md +22 -11
- package/docs/rules/presets/workflow-templates.md +26 -15
- package/docs/rules/require-codeql-actions-read.md +50 -0
- package/docs/rules/require-codeql-branch-filters.md +53 -0
- package/docs/rules/require-codeql-category-when-language-matrix.md +49 -0
- package/docs/rules/require-codeql-pull-request-trigger.md +53 -0
- package/docs/rules/require-codeql-schedule.md +57 -0
- package/docs/rules/require-codeql-security-events-write.md +50 -0
- package/docs/rules/require-dependabot-assignees.md +64 -0
- package/docs/rules/require-dependabot-automation-permissions.md +53 -0
- package/docs/rules/require-dependabot-automation-pull-request-trigger.md +49 -0
- package/docs/rules/require-dependabot-bot-actor-guard.md +52 -0
- package/docs/rules/require-dependabot-commit-message-include-scope.md +58 -0
- package/docs/rules/require-dependabot-commit-message-prefix-development.md +60 -0
- package/docs/rules/require-dependabot-commit-message-prefix.md +64 -0
- package/docs/rules/require-dependabot-cooldown.md +59 -0
- package/docs/rules/require-dependabot-directory.md +79 -0
- package/docs/rules/require-dependabot-github-actions-directory-root.md +62 -0
- package/docs/rules/require-dependabot-labels.md +65 -0
- package/docs/rules/require-dependabot-open-pull-requests-limit.md +58 -0
- package/docs/rules/require-dependabot-package-ecosystem.md +57 -0
- package/docs/rules/require-dependabot-patterns-for-multi-ecosystem-group.md +67 -0
- package/docs/rules/require-dependabot-schedule-cronjob.md +74 -0
- package/docs/rules/require-dependabot-schedule-interval.md +66 -0
- package/docs/rules/require-dependabot-schedule-time.md +60 -0
- package/docs/rules/require-dependabot-schedule-timezone.md +61 -0
- package/docs/rules/require-dependabot-target-branch.md +63 -0
- package/docs/rules/require-dependabot-updates.md +58 -0
- package/docs/rules/require-dependabot-version.md +70 -0
- package/docs/rules/require-dependabot-versioning-strategy-for-npm.md +58 -0
- package/docs/rules/require-dependency-review-action.md +60 -0
- package/docs/rules/require-dependency-review-fail-on-severity.md +57 -0
- package/docs/rules/require-dependency-review-permissions-contents-read.md +62 -0
- package/docs/rules/require-dependency-review-pull-request-trigger.md +57 -0
- package/docs/rules/require-fetch-metadata-github-token.md +49 -0
- package/docs/rules/require-job-name.md +6 -2
- package/docs/rules/require-job-step-name.md +11 -2
- package/docs/rules/require-sarif-upload-security-events-write.md +50 -0
- package/docs/rules/require-scorecard-results-format-sarif.md +49 -0
- package/docs/rules/require-scorecard-upload-sarif-step.md +55 -0
- package/docs/rules/require-secret-scan-contents-read.md +48 -0
- package/docs/rules/require-secret-scan-fetch-depth-zero.md +50 -0
- package/docs/rules/require-secret-scan-schedule.md +50 -0
- package/docs/rules/require-trufflehog-verified-results-mode.md +49 -0
- package/package.json +50 -57
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @packageDocumentation
|
|
3
|
+
* Require actions/dependency-review-action steps to configure fail-on-severity.
|
|
4
|
+
*/
|
|
5
|
+
import type { Rule } from "eslint";
|
|
6
|
+
/** Rule implementation for dependency-review fail-on-severity requirements. */
|
|
7
|
+
declare const rule: Rule.RuleModule;
|
|
8
|
+
export default rule;
|
|
9
|
+
//# sourceMappingURL=require-dependency-review-fail-on-severity.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"require-dependency-review-fail-on-severity.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependency-review-fail-on-severity.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAUnC,+EAA+E;AAC/E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAsEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,62 @@
|
|
|
1
|
+
import { getDependencyReviewActionSteps } from "../_internal/dependency-review-workflow.js";
|
|
2
|
+
import { getMappingPair, getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
|
|
3
|
+
/** Rule implementation for dependency-review fail-on-severity requirements. */
|
|
4
|
+
const rule = {
|
|
5
|
+
create(context) {
|
|
6
|
+
return {
|
|
7
|
+
Program() {
|
|
8
|
+
const root = getWorkflowRoot(context);
|
|
9
|
+
if (root === null) {
|
|
10
|
+
return;
|
|
11
|
+
}
|
|
12
|
+
for (const step of getDependencyReviewActionSteps(root)) {
|
|
13
|
+
const withMapping = getMappingValueAsMapping(step.stepMapping, "with");
|
|
14
|
+
const failOnSeverityPair = withMapping === null
|
|
15
|
+
? null
|
|
16
|
+
: getMappingPair(withMapping, "fail-on-severity");
|
|
17
|
+
const failOnSeverityValue = getScalarStringValue(failOnSeverityPair?.value ?? null)?.trim();
|
|
18
|
+
if (failOnSeverityValue !== undefined &&
|
|
19
|
+
failOnSeverityValue !== null &&
|
|
20
|
+
failOnSeverityValue.length > 0) {
|
|
21
|
+
continue;
|
|
22
|
+
}
|
|
23
|
+
context.report({
|
|
24
|
+
data: {
|
|
25
|
+
jobId: step.job.id,
|
|
26
|
+
},
|
|
27
|
+
messageId: "missingFailOnSeverity",
|
|
28
|
+
node: (failOnSeverityPair?.value ??
|
|
29
|
+
failOnSeverityPair ??
|
|
30
|
+
withMapping ??
|
|
31
|
+
step.usesPair),
|
|
32
|
+
});
|
|
33
|
+
}
|
|
34
|
+
},
|
|
35
|
+
};
|
|
36
|
+
},
|
|
37
|
+
meta: {
|
|
38
|
+
deprecated: false,
|
|
39
|
+
docs: {
|
|
40
|
+
configs: [
|
|
41
|
+
"github-actions.configs.all",
|
|
42
|
+
"github-actions.configs.codeScanning",
|
|
43
|
+
"github-actions.configs.security",
|
|
44
|
+
],
|
|
45
|
+
description: "require `actions/dependency-review-action` steps to set `with.fail-on-severity`.",
|
|
46
|
+
dialects: ["GitHub Actions workflow"],
|
|
47
|
+
frozen: false,
|
|
48
|
+
recommended: false,
|
|
49
|
+
requiresTypeChecking: false,
|
|
50
|
+
ruleId: "R093",
|
|
51
|
+
ruleNumber: 93,
|
|
52
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependency-review-fail-on-severity",
|
|
53
|
+
},
|
|
54
|
+
messages: {
|
|
55
|
+
missingFailOnSeverity: "Dependency review action steps in job '{{jobId}}' should set `with.fail-on-severity` so vulnerability blocking policy is explicit.",
|
|
56
|
+
},
|
|
57
|
+
schema: [],
|
|
58
|
+
type: "suggestion",
|
|
59
|
+
},
|
|
60
|
+
};
|
|
61
|
+
export default rule;
|
|
62
|
+
//# sourceMappingURL=require-dependency-review-fail-on-severity.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"require-dependency-review-fail-on-severity.js","sourceRoot":"","sources":["../../src/rules/require-dependency-review-fail-on-severity.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AAC5F,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,+EAA+E;AAC/E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,IAAI,IAAI,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtD,MAAM,WAAW,GAAG,wBAAwB,CACxC,IAAI,CAAC,WAAW,EAChB,MAAM,CACT,CAAC;oBACF,MAAM,kBAAkB,GACpB,WAAW,KAAK,IAAI;wBAChB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;oBAC1D,MAAM,mBAAmB,GAAG,oBAAoB,CAC5C,kBAAkB,EAAE,KAAK,IAAI,IAAI,CACpC,EAAE,IAAI,EAAE,CAAC;oBAEV,IACI,mBAAmB,KAAK,SAAS;wBACjC,mBAAmB,KAAK,IAAI;wBAC5B,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAChC,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE;4BACF,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE;yBACrB;wBACD,SAAS,EAAE,uBAAuB;wBAClC,IAAI,EAAE,CAAC,kBAAkB,EAAE,KAAK;4BAC5B,kBAAkB;4BAClB,WAAW;4BACX,IAAI,CAAC,QAAQ,CAAyB;qBAC7C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,qCAAqC;gBACrC,iCAAiC;aACpC;YACD,WAAW,EACP,kFAAkF;YACtF,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,mHAAmH;SAC3H;QACD,QAAQ,EAAE;YACN,qBAAqB,EACjB,oIAAoI;SAC3I;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @packageDocumentation
|
|
3
|
+
* Require workflows using actions/dependency-review-action to set permissions.contents to read.
|
|
4
|
+
*/
|
|
5
|
+
import type { Rule } from "eslint";
|
|
6
|
+
/** Rule implementation for dependency-review contents permission requirements. */
|
|
7
|
+
declare const rule: Rule.RuleModule;
|
|
8
|
+
export default rule;
|
|
9
|
+
//# sourceMappingURL=require-dependency-review-permissions-contents-read.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"require-dependency-review-permissions-contents-read.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependency-review-permissions-contents-read.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAUnC,kFAAkF;AAClF,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA6DhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
import { hasDependencyReviewAction } from "../_internal/dependency-review-workflow.js";
|
|
2
|
+
import { getMappingPair, getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
|
|
3
|
+
/** Rule implementation for dependency-review contents permission requirements. */
|
|
4
|
+
const rule = {
|
|
5
|
+
create(context) {
|
|
6
|
+
return {
|
|
7
|
+
Program() {
|
|
8
|
+
const root = getWorkflowRoot(context);
|
|
9
|
+
if (root === null || !hasDependencyReviewAction(root)) {
|
|
10
|
+
return;
|
|
11
|
+
}
|
|
12
|
+
const permissionsMapping = getMappingValueAsMapping(root, "permissions");
|
|
13
|
+
const contentsPair = permissionsMapping === null
|
|
14
|
+
? null
|
|
15
|
+
: getMappingPair(permissionsMapping, "contents");
|
|
16
|
+
const contentsValue = getScalarStringValue(contentsPair?.value ?? null)?.trim();
|
|
17
|
+
if (contentsValue === "read") {
|
|
18
|
+
return;
|
|
19
|
+
}
|
|
20
|
+
context.report({
|
|
21
|
+
messageId: "missingContentsReadPermission",
|
|
22
|
+
node: (contentsPair?.value ??
|
|
23
|
+
contentsPair ??
|
|
24
|
+
permissionsMapping ??
|
|
25
|
+
root),
|
|
26
|
+
});
|
|
27
|
+
},
|
|
28
|
+
};
|
|
29
|
+
},
|
|
30
|
+
meta: {
|
|
31
|
+
deprecated: false,
|
|
32
|
+
docs: {
|
|
33
|
+
configs: [
|
|
34
|
+
"github-actions.configs.all",
|
|
35
|
+
"github-actions.configs.codeScanning",
|
|
36
|
+
"github-actions.configs.security",
|
|
37
|
+
],
|
|
38
|
+
description: "require workflows using `actions/dependency-review-action` to set top-level `permissions.contents: read`.",
|
|
39
|
+
dialects: ["GitHub Actions workflow"],
|
|
40
|
+
frozen: false,
|
|
41
|
+
recommended: false,
|
|
42
|
+
requiresTypeChecking: false,
|
|
43
|
+
ruleId: "R092",
|
|
44
|
+
ruleNumber: 92,
|
|
45
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependency-review-permissions-contents-read",
|
|
46
|
+
},
|
|
47
|
+
messages: {
|
|
48
|
+
missingContentsReadPermission: "Workflows using `actions/dependency-review-action` should set top-level `permissions.contents: read`.",
|
|
49
|
+
},
|
|
50
|
+
schema: [],
|
|
51
|
+
type: "problem",
|
|
52
|
+
},
|
|
53
|
+
};
|
|
54
|
+
export default rule;
|
|
55
|
+
//# sourceMappingURL=require-dependency-review-permissions-contents-read.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"require-dependency-review-permissions-contents-read.js","sourceRoot":"","sources":["../../src/rules/require-dependency-review-permissions-contents-read.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,kFAAkF;AAClF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,OAAO;gBACX,CAAC;gBAED,MAAM,kBAAkB,GAAG,wBAAwB,CAC/C,IAAI,EACJ,aAAa,CAChB,CAAC;gBACF,MAAM,YAAY,GACd,kBAAkB,KAAK,IAAI;oBACvB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,cAAc,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;gBACzD,MAAM,aAAa,GAAG,oBAAoB,CACtC,YAAY,EAAE,KAAK,IAAI,IAAI,CAC9B,EAAE,IAAI,EAAE,CAAC;gBAEV,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;oBAC3B,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,+BAA+B;oBAC1C,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK;wBACtB,YAAY;wBACZ,kBAAkB;wBAClB,IAAI,CAAyB;iBACpC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,qCAAqC;gBACrC,iCAAiC;aACpC;YACD,WAAW,EACP,2GAA2G;YAC/G,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,4HAA4H;SACpI;QACD,QAAQ,EAAE;YACN,6BAA6B,EACzB,uGAAuG;SAC9G;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @packageDocumentation
|
|
3
|
+
* Require workflows using actions/dependency-review-action to run on pull_request.
|
|
4
|
+
*/
|
|
5
|
+
import type { Rule } from "eslint";
|
|
6
|
+
/** Rule implementation for dependency review pull_request trigger requirements. */
|
|
7
|
+
declare const rule: Rule.RuleModule;
|
|
8
|
+
export default rule;
|
|
9
|
+
//# sourceMappingURL=require-dependency-review-pull-request-trigger.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"require-dependency-review-pull-request-trigger.d.ts","sourceRoot":"","sources":["../../src/rules/require-dependency-review-pull-request-trigger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAQnC,mFAAmF;AACnF,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA8ChB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
import { hasDependencyReviewAction } from "../_internal/dependency-review-workflow.js";
|
|
2
|
+
import { getWorkflowEventNames, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
|
|
3
|
+
/** Rule implementation for dependency review pull_request trigger requirements. */
|
|
4
|
+
const rule = {
|
|
5
|
+
create(context) {
|
|
6
|
+
return {
|
|
7
|
+
Program() {
|
|
8
|
+
const root = getWorkflowRoot(context);
|
|
9
|
+
if (root === null || !hasDependencyReviewAction(root)) {
|
|
10
|
+
return;
|
|
11
|
+
}
|
|
12
|
+
if (getWorkflowEventNames(root).has("pull_request")) {
|
|
13
|
+
return;
|
|
14
|
+
}
|
|
15
|
+
context.report({
|
|
16
|
+
messageId: "missingPullRequestTrigger",
|
|
17
|
+
node: root,
|
|
18
|
+
});
|
|
19
|
+
},
|
|
20
|
+
};
|
|
21
|
+
},
|
|
22
|
+
meta: {
|
|
23
|
+
deprecated: false,
|
|
24
|
+
docs: {
|
|
25
|
+
configs: [
|
|
26
|
+
"github-actions.configs.all",
|
|
27
|
+
"github-actions.configs.codeScanning",
|
|
28
|
+
"github-actions.configs.security",
|
|
29
|
+
],
|
|
30
|
+
description: "require workflows using `actions/dependency-review-action` to listen for `pull_request`.",
|
|
31
|
+
dialects: ["GitHub Actions workflow"],
|
|
32
|
+
frozen: false,
|
|
33
|
+
recommended: false,
|
|
34
|
+
requiresTypeChecking: false,
|
|
35
|
+
ruleId: "R094",
|
|
36
|
+
ruleNumber: 94,
|
|
37
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-dependency-review-pull-request-trigger",
|
|
38
|
+
},
|
|
39
|
+
messages: {
|
|
40
|
+
missingPullRequestTrigger: "Workflows using `actions/dependency-review-action` should listen for `pull_request` so dependency review runs on pull request changes.",
|
|
41
|
+
},
|
|
42
|
+
schema: [],
|
|
43
|
+
type: "problem",
|
|
44
|
+
},
|
|
45
|
+
};
|
|
46
|
+
export default rule;
|
|
47
|
+
//# sourceMappingURL=require-dependency-review-pull-request-trigger.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"require-dependency-review-pull-request-trigger.js","sourceRoot":"","sources":["../../src/rules/require-dependency-review-pull-request-trigger.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EACH,qBAAqB,EACrB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,mFAAmF;AACnF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,OAAO;gBACX,CAAC;gBAED,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;oBAClD,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,2BAA2B;oBACtC,IAAI,EAAE,IAA4B;iBACrC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,qCAAqC;gBACrC,iCAAiC;aACpC;YACD,WAAW,EACP,0FAA0F;YAC9F,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,uHAAuH;SAC/H;QACD,QAAQ,EAAE;YACN,yBAAyB,EACrB,wIAAwI;SAC/I;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @packageDocumentation
|
|
3
|
+
* Require dependabot/fetch-metadata steps to provide github-token.
|
|
4
|
+
*/
|
|
5
|
+
import type { Rule } from "eslint";
|
|
6
|
+
/** Rule implementation for fetch-metadata github-token requirements. */
|
|
7
|
+
declare const rule: Rule.RuleModule;
|
|
8
|
+
export default rule;
|
|
9
|
+
//# sourceMappingURL=require-fetch-metadata-github-token.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"require-fetch-metadata-github-token.d.ts","sourceRoot":"","sources":["../../src/rules/require-fetch-metadata-github-token.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAUnC,wEAAwE;AACxE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA+DhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -0,0 +1,57 @@
|
|
|
1
|
+
import { getDependabotFetchMetadataSteps } from "../_internal/dependabot-automation-workflow.js";
|
|
2
|
+
import { getMappingPair, getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
|
|
3
|
+
/** Rule implementation for fetch-metadata github-token requirements. */
|
|
4
|
+
const rule = {
|
|
5
|
+
create(context) {
|
|
6
|
+
return {
|
|
7
|
+
Program() {
|
|
8
|
+
const root = getWorkflowRoot(context);
|
|
9
|
+
if (root === null) {
|
|
10
|
+
return;
|
|
11
|
+
}
|
|
12
|
+
for (const step of getDependabotFetchMetadataSteps(root)) {
|
|
13
|
+
const withMapping = getMappingValueAsMapping(step.stepMapping, "with");
|
|
14
|
+
const tokenPair = withMapping === null
|
|
15
|
+
? null
|
|
16
|
+
: getMappingPair(withMapping, "github-token");
|
|
17
|
+
const tokenValue = getScalarStringValue(tokenPair?.value ?? null)?.trim();
|
|
18
|
+
if (tokenValue !== undefined && tokenValue.length > 0) {
|
|
19
|
+
continue;
|
|
20
|
+
}
|
|
21
|
+
context.report({
|
|
22
|
+
data: { jobId: step.job.id },
|
|
23
|
+
messageId: "missingGithubToken",
|
|
24
|
+
node: (tokenPair?.value ??
|
|
25
|
+
tokenPair ??
|
|
26
|
+
withMapping ??
|
|
27
|
+
step.usesPair),
|
|
28
|
+
});
|
|
29
|
+
}
|
|
30
|
+
},
|
|
31
|
+
};
|
|
32
|
+
},
|
|
33
|
+
meta: {
|
|
34
|
+
deprecated: false,
|
|
35
|
+
docs: {
|
|
36
|
+
configs: [
|
|
37
|
+
"github-actions.configs.all",
|
|
38
|
+
"github-actions.configs.security",
|
|
39
|
+
],
|
|
40
|
+
description: "require `dependabot/fetch-metadata` steps to configure `with.github-token`.",
|
|
41
|
+
dialects: ["GitHub Actions workflow"],
|
|
42
|
+
frozen: false,
|
|
43
|
+
recommended: true,
|
|
44
|
+
requiresTypeChecking: false,
|
|
45
|
+
ruleId: "R110",
|
|
46
|
+
ruleNumber: 110,
|
|
47
|
+
url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-fetch-metadata-github-token",
|
|
48
|
+
},
|
|
49
|
+
messages: {
|
|
50
|
+
missingGithubToken: "`dependabot/fetch-metadata` step in job '{{jobId}}' should configure `with.github-token`.",
|
|
51
|
+
},
|
|
52
|
+
schema: [],
|
|
53
|
+
type: "problem",
|
|
54
|
+
},
|
|
55
|
+
};
|
|
56
|
+
export default rule;
|
|
57
|
+
//# sourceMappingURL=require-fetch-metadata-github-token.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"require-fetch-metadata-github-token.js","sourceRoot":"","sources":["../../src/rules/require-fetch-metadata-github-token.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,wEAAwE;AACxE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,IAAI,IAAI,+BAA+B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvD,MAAM,WAAW,GAAG,wBAAwB,CACxC,IAAI,CAAC,WAAW,EAChB,MAAM,CACT,CAAC;oBACF,MAAM,SAAS,GACX,WAAW,KAAK,IAAI;wBAChB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;oBACtD,MAAM,UAAU,GAAG,oBAAoB,CACnC,SAAS,EAAE,KAAK,IAAI,IAAI,CAC3B,EAAE,IAAI,EAAE,CAAC;oBAEV,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpD,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;wBAC5B,SAAS,EAAE,oBAAoB;wBAC/B,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK;4BACnB,SAAS;4BACT,WAAW;4BACX,IAAI,CAAC,QAAQ,CAAyB;qBAC7C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,iCAAiC;aACpC;YACD,WAAW,EACP,6EAA6E;YACjF,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,GAAG;YACf,GAAG,EAAE,4GAA4G;SACpH;QACD,QAAQ,EAAE;YACN,kBAAkB,EACd,2FAA2F;SAClG;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"require-job-name.d.ts","sourceRoot":"","sources":["../../src/rules/require-job-name.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;
|
|
1
|
+
{"version":3,"file":"require-job-name.d.ts","sourceRoot":"","sources":["../../src/rules/require-job-name.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAenC,4DAA4D;AAC5D,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAqIhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -1,4 +1,5 @@
|
|
|
1
1
|
import { getMappingPair, getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
|
|
2
|
+
import { getIndexAfterLine, getLineIndentation, } from "../_internal/yaml-fixes.js";
|
|
2
3
|
/** Rule implementation for requiring explicit job names. */
|
|
3
4
|
const rule = {
|
|
4
5
|
create(context) {
|
|
@@ -13,6 +14,7 @@ const rule = {
|
|
|
13
14
|
return;
|
|
14
15
|
}
|
|
15
16
|
for (const pair of jobsMapping.pairs) {
|
|
17
|
+
const jobKeyNode = pair.key;
|
|
16
18
|
const jobId = getScalarStringValue(pair.key) ?? "<unknown>";
|
|
17
19
|
const jobValue = unwrapYamlValue(pair.value);
|
|
18
20
|
if (jobValue?.type !== "YAMLMapping") {
|
|
@@ -29,16 +31,43 @@ const rule = {
|
|
|
29
31
|
data: { jobId },
|
|
30
32
|
messageId: "missingJobName",
|
|
31
33
|
node: pair.key,
|
|
34
|
+
suggest: jobId === "<unknown>" || jobKeyNode === null
|
|
35
|
+
? undefined
|
|
36
|
+
: [
|
|
37
|
+
{
|
|
38
|
+
data: { jobId },
|
|
39
|
+
fix: (fixer) => {
|
|
40
|
+
const insertionIndex = getIndexAfterLine(context.sourceCode
|
|
41
|
+
.text, jobKeyNode.range[1]);
|
|
42
|
+
const childIndentation = `${getLineIndentation(context.sourceCode.text, jobKeyNode.range[0])} `;
|
|
43
|
+
return fixer.insertTextBeforeRange([
|
|
44
|
+
insertionIndex,
|
|
45
|
+
insertionIndex,
|
|
46
|
+
], `${childIndentation}name: ${JSON.stringify(jobId)}\n`);
|
|
47
|
+
},
|
|
48
|
+
messageId: "insertJobNameSuggestion",
|
|
49
|
+
},
|
|
50
|
+
],
|
|
32
51
|
});
|
|
33
52
|
continue;
|
|
34
53
|
}
|
|
35
54
|
const nameValue = getScalarStringValue(namePair.value);
|
|
55
|
+
const nameValueNode = namePair.value;
|
|
36
56
|
if (nameValue === null || nameValue.trim().length === 0) {
|
|
37
57
|
context.report({
|
|
38
58
|
data: { jobId },
|
|
39
59
|
messageId: "invalidJobName",
|
|
40
60
|
node: (namePair.value ??
|
|
41
61
|
namePair),
|
|
62
|
+
suggest: jobId === "<unknown>" || nameValueNode === null
|
|
63
|
+
? undefined
|
|
64
|
+
: [
|
|
65
|
+
{
|
|
66
|
+
data: { jobId },
|
|
67
|
+
fix: (fixer) => fixer.replaceTextRange(nameValueNode.range, JSON.stringify(jobId)),
|
|
68
|
+
messageId: "replaceJobNameSuggestion",
|
|
69
|
+
},
|
|
70
|
+
],
|
|
42
71
|
});
|
|
43
72
|
}
|
|
44
73
|
}
|
|
@@ -46,21 +75,27 @@ const rule = {
|
|
|
46
75
|
};
|
|
47
76
|
},
|
|
48
77
|
meta: {
|
|
78
|
+
deprecated: false,
|
|
49
79
|
docs: {
|
|
50
80
|
configs: [
|
|
51
81
|
"github-actions.configs.all",
|
|
52
82
|
"github-actions.configs.strict",
|
|
53
83
|
],
|
|
54
84
|
description: "require every workflow job to declare a non-empty string `name` for readable run summaries.",
|
|
85
|
+
dialects: ["GitHub Actions workflow"],
|
|
86
|
+
frozen: false,
|
|
55
87
|
recommended: false,
|
|
56
88
|
requiresTypeChecking: false,
|
|
57
89
|
ruleId: "R007",
|
|
58
90
|
ruleNumber: 7,
|
|
59
91
|
url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-job-name",
|
|
60
92
|
},
|
|
93
|
+
hasSuggestions: true,
|
|
61
94
|
messages: {
|
|
95
|
+
insertJobNameSuggestion: "Insert `name: {{jobId}}` for this job.",
|
|
62
96
|
invalidJobName: "Job '{{jobId}}' must set `name` to a non-empty string.",
|
|
63
97
|
missingJobName: "Job '{{jobId}}' is missing a human-readable `name`.",
|
|
98
|
+
replaceJobNameSuggestion: "Replace the blank job name with `{{jobId}}`.",
|
|
64
99
|
},
|
|
65
100
|
schema: [],
|
|
66
101
|
type: "suggestion",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"require-job-name.js","sourceRoot":"","sources":["../../src/rules/require-job-name.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;
|
|
1
|
+
{"version":3,"file":"require-job-name.js","sourceRoot":"","sources":["../../src/rules/require-job-name.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACH,iBAAiB,EACjB,kBAAkB,GACrB,MAAM,4BAA4B,CAAC;AAEpC,4DAA4D;AAC5D,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAE3D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;oBACvB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;oBACnC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC;oBAC5B,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;oBAC5D,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAE7C,IAAI,QAAQ,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;wBACnC,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE,EAAE,KAAK,EAAE;4BACf,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAyB;yBACrD,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAElD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;wBACpB,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE,EAAE,KAAK,EAAE;4BACf,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,IAAI,CAAC,GAA2C;4BACtD,OAAO,EACH,KAAK,KAAK,WAAW,IAAI,UAAU,KAAK,IAAI;gCACxC,CAAC,CAAC,SAAS;gCACX,CAAC,CAAC;oCACI;wCACI,IAAI,EAAE,EAAE,KAAK,EAAE;wCACf,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;4CACX,MAAM,cAAc,GAChB,iBAAiB,CACb,OAAO,CAAC,UAAU;iDACb,IAAI,EACT,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CACtB,CAAC;4CACN,MAAM,gBAAgB,GAAG,GAAG,kBAAkB,CAC1C,OAAO,CAAC,UAAU,CAAC,IAAI,EACvB,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CACtB,IAAI,CAAC;4CAEN,OAAO,KAAK,CAAC,qBAAqB,CAC9B;gDACI,cAAc;gDACd,cAAc;6CACjB,EACD,GAAG,gBAAgB,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CACxD,CAAC;wCACN,CAAC;wCACD,SAAS,EACL,yBAAyB;qCAChC;iCACJ;yBACd,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBACvD,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC;oBAErC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACtD,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE,EAAE,KAAK,EAAE;4BACf,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK;gCACjB,QAAQ,CAAyB;4BACrC,OAAO,EACH,KAAK,KAAK,WAAW,IAAI,aAAa,KAAK,IAAI;gCAC3C,CAAC,CAAC,SAAS;gCACX,CAAC,CAAC;oCACI;wCACI,IAAI,EAAE,EAAE,KAAK,EAAE;wCACf,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CACX,KAAK,CAAC,gBAAgB,CAClB,aAAa,CAAC,KAAK,EACnB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CACxB;wCACL,SAAS,EACL,0BAA0B;qCACjC;iCACJ;yBACd,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,6FAA6F;YACjG,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,CAAC;YACb,GAAG,EAAE,yFAAyF;SACjG;QACD,cAAc,EAAE,IAAI;QACpB,QAAQ,EAAE;YACN,uBAAuB,EAAE,wCAAwC;YACjE,cAAc,EACV,wDAAwD;YAC5D,cAAc,EACV,qDAAqD;YACzD,wBAAwB,EACpB,8CAA8C;SACrD;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"require-job-step-name.d.ts","sourceRoot":"","sources":["../../src/rules/require-job-step-name.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;
|
|
1
|
+
{"version":3,"file":"require-job-step-name.d.ts","sourceRoot":"","sources":["../../src/rules/require-job-step-name.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAyDnC,iEAAiE;AACjE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA+JhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -1,4 +1,32 @@
|
|
|
1
1
|
import { getMappingPair, getMappingValueAsSequence, getScalarStringValue, getWorkflowJobs, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
|
|
2
|
+
import { getIndexAfterLine, getLineIndentation, } from "../_internal/yaml-fixes.js";
|
|
3
|
+
/** Maximum suggested step-name length derived from a run command. */
|
|
4
|
+
const MAX_SUGGESTED_STEP_NAME_LENGTH = 60;
|
|
5
|
+
/** Derive a suggestion label from a step's `uses` or `run` content. */
|
|
6
|
+
const getSuggestedStepName = (stepMapping) => {
|
|
7
|
+
if (stepMapping?.type !== "YAMLMapping") {
|
|
8
|
+
return undefined;
|
|
9
|
+
}
|
|
10
|
+
const usesReference = getScalarStringValue(getMappingPair(stepMapping, "uses")?.value)?.trim();
|
|
11
|
+
if (usesReference !== undefined && usesReference.length > 0) {
|
|
12
|
+
const atSignIndex = usesReference.lastIndexOf("@");
|
|
13
|
+
return atSignIndex === -1
|
|
14
|
+
? usesReference
|
|
15
|
+
: usesReference.slice(0, atSignIndex);
|
|
16
|
+
}
|
|
17
|
+
const runScript = getScalarStringValue(getMappingPair(stepMapping, "run")?.value);
|
|
18
|
+
if (runScript === null) {
|
|
19
|
+
return undefined;
|
|
20
|
+
}
|
|
21
|
+
const firstNonEmptyLine = runScript
|
|
22
|
+
.split(/\r?\n/u)
|
|
23
|
+
.map((line) => line.trim())
|
|
24
|
+
.find((line) => line.length > 0);
|
|
25
|
+
return firstNonEmptyLine === undefined ||
|
|
26
|
+
firstNonEmptyLine.length > MAX_SUGGESTED_STEP_NAME_LENGTH
|
|
27
|
+
? undefined
|
|
28
|
+
: firstNonEmptyLine;
|
|
29
|
+
};
|
|
2
30
|
/** Rule implementation for requiring explicit job step names. */
|
|
3
31
|
const rule = {
|
|
4
32
|
create(context) {
|
|
@@ -18,20 +46,49 @@ const rule = {
|
|
|
18
46
|
if (stepMapping?.type !== "YAMLMapping") {
|
|
19
47
|
continue;
|
|
20
48
|
}
|
|
49
|
+
const suggestedStepName = getSuggestedStepName(stepMapping);
|
|
21
50
|
const namePair = getMappingPair(stepMapping, "name");
|
|
22
51
|
if (namePair === null) {
|
|
52
|
+
const firstStepPair = stepMapping.pairs[0];
|
|
53
|
+
const firstStepKeyNode = firstStepPair?.key;
|
|
23
54
|
context.report({
|
|
24
55
|
data: {
|
|
25
56
|
jobId: job.id,
|
|
26
57
|
},
|
|
27
58
|
messageId: "missingStepName",
|
|
28
59
|
node: stepMapping,
|
|
60
|
+
suggest: suggestedStepName === undefined ||
|
|
61
|
+
firstStepKeyNode === null ||
|
|
62
|
+
firstStepKeyNode === undefined
|
|
63
|
+
? undefined
|
|
64
|
+
: [
|
|
65
|
+
{
|
|
66
|
+
data: {
|
|
67
|
+
jobId: job.id,
|
|
68
|
+
suggestedStepName,
|
|
69
|
+
},
|
|
70
|
+
fix: (fixer) => {
|
|
71
|
+
const insertionIndex = getIndexAfterLine(context.sourceCode
|
|
72
|
+
.text, firstStepKeyNode
|
|
73
|
+
.range[1]);
|
|
74
|
+
const childIndentation = `${getLineIndentation(context.sourceCode
|
|
75
|
+
.text, firstStepKeyNode
|
|
76
|
+
.range[0])} `;
|
|
77
|
+
return fixer.insertTextBeforeRange([
|
|
78
|
+
insertionIndex,
|
|
79
|
+
insertionIndex,
|
|
80
|
+
], `${childIndentation}name: ${JSON.stringify(suggestedStepName)}\n`);
|
|
81
|
+
},
|
|
82
|
+
messageId: "insertStepNameSuggestion",
|
|
83
|
+
},
|
|
84
|
+
],
|
|
29
85
|
});
|
|
30
86
|
continue;
|
|
31
87
|
}
|
|
32
88
|
const nameValue = getScalarStringValue(namePair.value);
|
|
33
89
|
if (nameValue === null ||
|
|
34
90
|
nameValue.trim().length === 0) {
|
|
91
|
+
const nameValueNode = namePair.value;
|
|
35
92
|
context.report({
|
|
36
93
|
data: {
|
|
37
94
|
jobId: job.id,
|
|
@@ -39,6 +96,19 @@ const rule = {
|
|
|
39
96
|
messageId: "invalidStepName",
|
|
40
97
|
node: (namePair.value ??
|
|
41
98
|
namePair),
|
|
99
|
+
suggest: suggestedStepName === undefined ||
|
|
100
|
+
nameValueNode === null
|
|
101
|
+
? undefined
|
|
102
|
+
: [
|
|
103
|
+
{
|
|
104
|
+
data: {
|
|
105
|
+
jobId: job.id,
|
|
106
|
+
suggestedStepName,
|
|
107
|
+
},
|
|
108
|
+
fix: (fixer) => fixer.replaceTextRange(nameValueNode.range, JSON.stringify(suggestedStepName)),
|
|
109
|
+
messageId: "replaceStepNameSuggestion",
|
|
110
|
+
},
|
|
111
|
+
],
|
|
42
112
|
});
|
|
43
113
|
}
|
|
44
114
|
}
|
|
@@ -47,21 +117,27 @@ const rule = {
|
|
|
47
117
|
};
|
|
48
118
|
},
|
|
49
119
|
meta: {
|
|
120
|
+
deprecated: false,
|
|
50
121
|
docs: {
|
|
51
122
|
configs: [
|
|
52
123
|
"github-actions.configs.all",
|
|
53
124
|
"github-actions.configs.strict",
|
|
54
125
|
],
|
|
55
126
|
description: "require every workflow step to declare a non-empty string `name` so job logs remain readable.",
|
|
127
|
+
dialects: ["GitHub Actions workflow"],
|
|
128
|
+
frozen: false,
|
|
56
129
|
recommended: false,
|
|
57
130
|
requiresTypeChecking: false,
|
|
58
131
|
ruleId: "R008",
|
|
59
132
|
ruleNumber: 8,
|
|
60
133
|
url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-job-step-name",
|
|
61
134
|
},
|
|
135
|
+
hasSuggestions: true,
|
|
62
136
|
messages: {
|
|
137
|
+
insertStepNameSuggestion: "Insert `name: {{suggestedStepName}}` for this step in job '{{jobId}}'.",
|
|
63
138
|
invalidStepName: "A step in job '{{jobId}}' must set `name` to a non-empty string.",
|
|
64
139
|
missingStepName: "A step in job '{{jobId}}' is missing a human-readable `name`.",
|
|
140
|
+
replaceStepNameSuggestion: "Replace the blank step name with `{{suggestedStepName}}` in job '{{jobId}}'.",
|
|
65
141
|
},
|
|
66
142
|
schema: [],
|
|
67
143
|
type: "suggestion",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"require-job-step-name.js","sourceRoot":"","sources":["../../src/rules/require-job-step-name.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,cAAc,EACd,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;
|
|
1
|
+
{"version":3,"file":"require-job-step-name.js","sourceRoot":"","sources":["../../src/rules/require-job-step-name.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,cAAc,EACd,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACH,iBAAiB,EACjB,kBAAkB,GACrB,MAAM,4BAA4B,CAAC;AAEpC,qEAAqE;AACrE,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAE1C,uEAAuE;AACvE,MAAM,oBAAoB,GAAG,CACzB,WAAyD,EACvC,EAAE;IACpB,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,aAAa,GAAG,oBAAoB,CACtC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,KAAK,CAC7C,EAAE,IAAI,EAAE,CAAC;IAEV,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAEnD,OAAO,WAAW,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,SAAS,GAAG,oBAAoB,CAClC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,KAAK,CAC5C,CAAC;IAEF,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,iBAAiB,GAAG,SAAS;SAC9B,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAErC,OAAO,iBAAiB,KAAK,SAAS;QAClC,iBAAiB,CAAC,MAAM,GAAG,8BAA8B;QACzD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAC;AAC5B,CAAC,CAAC;AAEF,iEAAiE;AACjE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,aAAa,GAAG,yBAAyB,CAC3C,GAAG,CAAC,OAAO,EACX,OAAO,CACV,CAAC;oBAEF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;wBACzB,SAAS;oBACb,CAAC;oBAED,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;wBACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;wBAE3C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;4BACtC,SAAS;wBACb,CAAC;wBAED,MAAM,iBAAiB,GACnB,oBAAoB,CAAC,WAAW,CAAC,CAAC;wBAEtC,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;wBAErD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;4BACpB,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;4BAC3C,MAAM,gBAAgB,GAAG,aAAa,EAAE,GAAG,CAAC;4BAE5C,OAAO,CAAC,MAAM,CAAC;gCACX,IAAI,EAAE;oCACF,KAAK,EAAE,GAAG,CAAC,EAAE;iCAChB;gCACD,SAAS,EAAE,iBAAiB;gCAC5B,IAAI,EAAE,WAAmC;gCACzC,OAAO,EACH,iBAAiB,KAAK,SAAS;oCAC/B,gBAAgB,KAAK,IAAI;oCACzB,gBAAgB,KAAK,SAAS;oCAC1B,CAAC,CAAC,SAAS;oCACX,CAAC,CAAC;wCACI;4CACI,IAAI,EAAE;gDACF,KAAK,EAAE,GAAG,CAAC,EAAE;gDACb,iBAAiB;6CACpB;4CACD,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;gDACX,MAAM,cAAc,GAChB,iBAAiB,CACb,OAAO,CAAC,UAAU;qDACb,IAAI,EACT,gBAAgB;qDACX,KAAK,CAAC,CAAC,CAAC,CAChB,CAAC;gDACN,MAAM,gBAAgB,GAAG,GAAG,kBAAkB,CAC1C,OAAO,CAAC,UAAU;qDACb,IAAI,EACT,gBAAgB;qDACX,KAAK,CAAC,CAAC,CAAC,CAChB,IAAI,CAAC;gDAEN,OAAO,KAAK,CAAC,qBAAqB,CAC9B;oDACI,cAAc;oDACd,cAAc;iDACjB,EACD,GAAG,gBAAgB,SAAS,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,CACpE,CAAC;4CACN,CAAC;4CACD,SAAS,EACL,0BAA0B;yCACjC;qCACJ;6BACd,CAAC,CAAC;4BAEH,SAAS;wBACb,CAAC;wBAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;wBAEvD,IACI,SAAS,KAAK,IAAI;4BAClB,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAC/B,CAAC;4BACC,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC;4BAErC,OAAO,CAAC,MAAM,CAAC;gCACX,IAAI,EAAE;oCACF,KAAK,EAAE,GAAG,CAAC,EAAE;iCAChB;gCACD,SAAS,EAAE,iBAAiB;gCAC5B,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK;oCACjB,QAAQ,CAAyB;gCACrC,OAAO,EACH,iBAAiB,KAAK,SAAS;oCAC/B,aAAa,KAAK,IAAI;oCAClB,CAAC,CAAC,SAAS;oCACX,CAAC,CAAC;wCACI;4CACI,IAAI,EAAE;gDACF,KAAK,EAAE,GAAG,CAAC,EAAE;gDACb,iBAAiB;6CACpB;4CACD,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CACX,KAAK,CAAC,gBAAgB,CAClB,aAAa,CAAC,KAAK,EACnB,IAAI,CAAC,SAAS,CACV,iBAAiB,CACpB,CACJ;4CACL,SAAS,EACL,2BAA2B;yCAClC;qCACJ;6BACd,CAAC,CAAC;wBACP,CAAC;oBACL,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,+FAA+F;YACnG,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,CAAC;YACb,GAAG,EAAE,8FAA8F;SACtG;QACD,cAAc,EAAE,IAAI;QACpB,QAAQ,EAAE;YACN,wBAAwB,EACpB,wEAAwE;YAC5E,eAAe,EACX,kEAAkE;YACtE,eAAe,EACX,+DAA+D;YACnE,yBAAyB,EACrB,8EAA8E;SACrF;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"require-job-timeout-minutes.d.ts","sourceRoot":"","sources":["../../src/rules/require-job-timeout-minutes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAoBnC,kFAAkF;AAClF,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"require-job-timeout-minutes.d.ts","sourceRoot":"","sources":["../../src/rules/require-job-timeout-minutes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAoBnC,kFAAkF;AAClF,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAuHhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -60,6 +60,7 @@ const rule = {
|
|
|
60
60
|
},
|
|
61
61
|
meta: {
|
|
62
62
|
defaultOptions: [{}],
|
|
63
|
+
deprecated: false,
|
|
63
64
|
docs: {
|
|
64
65
|
configs: [
|
|
65
66
|
"github-actions.configs.all",
|
|
@@ -67,6 +68,8 @@ const rule = {
|
|
|
67
68
|
"github-actions.configs.strict",
|
|
68
69
|
],
|
|
69
70
|
description: "require every non-reusable workflow job to define a bounded `timeout-minutes` value.",
|
|
71
|
+
dialects: ["GitHub Actions workflow"],
|
|
72
|
+
frozen: false,
|
|
70
73
|
recommended: true,
|
|
71
74
|
requiresTypeChecking: false,
|
|
72
75
|
ruleId: "R002",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"require-job-timeout-minutes.js","sourceRoot":"","sources":["../../src/rules/require-job-timeout-minutes.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,wBAAwB,GAC3B,MAAM,+BAA+B,CAAC;AASvC,sEAAsE;AACtE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,kFAAkF;AAClF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAA0C,CAAC;QACrE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,mBAAmB,CAAC;QAE9D,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;wBAC/C,SAAS;oBACb,CAAC;oBAED,MAAM,WAAW,GAAG,cAAc,CAC9B,GAAG,CAAC,OAAO,EACX,iBAAiB,CACpB,CAAC;oBAEF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;wBACvB,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,KAAK,EAAE,GAAG,CAAC,EAAE;6BAChB;4BACD,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,GAAG,CAAC,MAAM;yBACnB,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,IAAI,wBAAwB,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC9C,SAAS;oBACb,CAAC;oBAED,MAAM,cAAc,GAAG,oBAAoB,CACvC,WAAW,CAAC,KAAK,CACpB,CAAC;oBAEF,IACI,cAAc,KAAK,IAAI;wBACvB,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC;wBACjC,cAAc,IAAI,CAAC,EACrB,CAAC;wBACC,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,KAAK,EAAE,GAAG,CAAC,EAAE;6BAChB;4BACD,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,WAAW,CAAC,KAAK,IAAI,WAAW;yBACzC,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,IAAI,cAAc,GAAG,UAAU,EAAE,CAAC;wBAC9B,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,aAAa,EAAE,MAAM,CAAC,cAAc,CAAC;gCACrC,KAAK,EAAE,GAAG,CAAC,EAAE;gCACb,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;6BACjC;4BACD,SAAS,EAAE,iBAAiB;4BAC5B,IAAI,EAAE,WAAW,CAAC,KAAK,IAAI,WAAW;yBACzC,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,cAAc,EAAE,CAAC,EAAE,CAAC;QACpB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,oCAAoC;gBACpC,+BAA+B;aAClC;YACD,WAAW,EACP,sFAAsF;YAC1F,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,CAAC;YACb,GAAG,EAAE,oGAAoG;SAC5G;QACD,QAAQ,EAAE;YACN,cAAc,EACV,wGAAwG;YAC5G,cAAc,EACV,0HAA0H;YAC9H,eAAe,EACX,sHAAsH;SAC7H;QACD,MAAM,EAAE;YACJ;gBACI,oBAAoB,EAAE,KAAK;gBAC3B,WAAW,EACP,wEAAwE;gBAC5E,UAAU,EAAE;oBACR,UAAU,EAAE;wBACR,WAAW,EACP,wEAAwE;wBAC5E,OAAO,EAAE,CAAC;wBACV,IAAI,EAAE,SAAS;qBAClB;iBACJ;gBACD,IAAI,EAAE,QAAQ;aACjB;SACJ;QACD,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
1
|
+
{"version":3,"file":"require-job-timeout-minutes.js","sourceRoot":"","sources":["../../src/rules/require-job-timeout-minutes.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,wBAAwB,GAC3B,MAAM,+BAA+B,CAAC;AASvC,sEAAsE;AACtE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,kFAAkF;AAClF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAA0C,CAAC;QACrE,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,mBAAmB,CAAC;QAE9D,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;wBAC/C,SAAS;oBACb,CAAC;oBAED,MAAM,WAAW,GAAG,cAAc,CAC9B,GAAG,CAAC,OAAO,EACX,iBAAiB,CACpB,CAAC;oBAEF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;wBACvB,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,KAAK,EAAE,GAAG,CAAC,EAAE;6BAChB;4BACD,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,GAAG,CAAC,MAAM;yBACnB,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,IAAI,wBAAwB,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC9C,SAAS;oBACb,CAAC;oBAED,MAAM,cAAc,GAAG,oBAAoB,CACvC,WAAW,CAAC,KAAK,CACpB,CAAC;oBAEF,IACI,cAAc,KAAK,IAAI;wBACvB,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC;wBACjC,cAAc,IAAI,CAAC,EACrB,CAAC;wBACC,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,KAAK,EAAE,GAAG,CAAC,EAAE;6BAChB;4BACD,SAAS,EAAE,gBAAgB;4BAC3B,IAAI,EAAE,WAAW,CAAC,KAAK,IAAI,WAAW;yBACzC,CAAC,CAAC;wBAEH,SAAS;oBACb,CAAC;oBAED,IAAI,cAAc,GAAG,UAAU,EAAE,CAAC;wBAC9B,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,aAAa,EAAE,MAAM,CAAC,cAAc,CAAC;gCACrC,KAAK,EAAE,GAAG,CAAC,EAAE;gCACb,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;6BACjC;4BACD,SAAS,EAAE,iBAAiB;4BAC5B,IAAI,EAAE,WAAW,CAAC,KAAK,IAAI,WAAW;yBACzC,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,cAAc,EAAE,CAAC,EAAE,CAAC;QACpB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,oCAAoC;gBACpC,+BAA+B;aAClC;YACD,WAAW,EACP,sFAAsF;YAC1F,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,CAAC;YACb,GAAG,EAAE,oGAAoG;SAC5G;QACD,QAAQ,EAAE;YACN,cAAc,EACV,wGAAwG;YAC5G,cAAc,EACV,0HAA0H;YAC9H,eAAe,EACX,sHAAsH;SAC7H;QACD,MAAM,EAAE;YACJ;gBACI,oBAAoB,EAAE,KAAK;gBAC3B,WAAW,EACP,wEAAwE;gBAC5E,UAAU,EAAE;oBACR,UAAU,EAAE;wBACR,WAAW,EACP,wEAAwE;wBAC5E,OAAO,EAAE,CAAC;wBACV,IAAI,EAAE,SAAS;qBAClB;iBACJ;gBACD,IAAI,EAAE,QAAQ;aACjB;SACJ;QACD,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"require-merge-group-trigger.d.ts","sourceRoot":"","sources":["../../src/rules/require-merge-group-trigger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAwCnC,8DAA8D;AAC9D,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"require-merge-group-trigger.d.ts","sourceRoot":"","sources":["../../src/rules/require-merge-group-trigger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAwCnC,8DAA8D;AAC9D,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAoDhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
|
|
@@ -42,12 +42,15 @@ const rule = {
|
|
|
42
42
|
};
|
|
43
43
|
},
|
|
44
44
|
meta: {
|
|
45
|
+
deprecated: false,
|
|
45
46
|
docs: {
|
|
46
47
|
configs: [
|
|
47
48
|
"github-actions.configs.all",
|
|
48
49
|
"github-actions.configs.strict",
|
|
49
50
|
],
|
|
50
51
|
description: "require pull-request validation workflows to include the `merge_group` trigger so required checks also run for merge queues.",
|
|
52
|
+
dialects: ["GitHub Actions workflow"],
|
|
53
|
+
frozen: false,
|
|
51
54
|
recommended: false,
|
|
52
55
|
requiresTypeChecking: false,
|
|
53
56
|
ruleId: "R035",
|