eslint-plugin-github-actions-2 1.0.2 → 1.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +149 -101
- package/dist/_internal/code-scanning-workflow.d.ts +37 -0
- package/dist/_internal/code-scanning-workflow.d.ts.map +1 -0
- package/dist/_internal/code-scanning-workflow.js +73 -0
- package/dist/_internal/code-scanning-workflow.js.map +1 -0
- package/dist/_internal/dependabot-automation-workflow.d.ts +26 -0
- package/dist/_internal/dependabot-automation-workflow.d.ts.map +1 -0
- package/dist/_internal/dependabot-automation-workflow.js +25 -0
- package/dist/_internal/dependabot-automation-workflow.js.map +1 -0
- package/dist/_internal/dependabot-yaml.d.ts +63 -0
- package/dist/_internal/dependabot-yaml.d.ts.map +1 -0
- package/dist/_internal/dependabot-yaml.js +139 -0
- package/dist/_internal/dependabot-yaml.js.map +1 -0
- package/dist/_internal/dependency-review-workflow.d.ts +20 -0
- package/dist/_internal/dependency-review-workflow.d.ts.map +1 -0
- package/dist/_internal/dependency-review-workflow.js +9 -0
- package/dist/_internal/dependency-review-workflow.js.map +1 -0
- package/dist/_internal/github-actions-config-references.d.ts +1 -1
- package/dist/_internal/github-actions-config-references.d.ts.map +1 -1
- package/dist/_internal/github-actions-config-references.js +19 -2
- package/dist/_internal/github-actions-config-references.js.map +1 -1
- package/dist/_internal/lint-targets.d.ts +8 -0
- package/dist/_internal/lint-targets.d.ts.map +1 -1
- package/dist/_internal/lint-targets.js +26 -0
- package/dist/_internal/lint-targets.js.map +1 -1
- package/dist/_internal/rules-registry.d.ts +90 -0
- package/dist/_internal/rules-registry.d.ts.map +1 -1
- package/dist/_internal/rules-registry.js +90 -0
- package/dist/_internal/rules-registry.js.map +1 -1
- package/dist/_internal/secret-scanning-workflow.d.ts +24 -0
- package/dist/_internal/secret-scanning-workflow.d.ts.map +1 -0
- package/dist/_internal/secret-scanning-workflow.js +21 -0
- package/dist/_internal/secret-scanning-workflow.js.map +1 -0
- package/dist/_internal/workflow-action-steps.d.ts +35 -0
- package/dist/_internal/workflow-action-steps.d.ts.map +1 -0
- package/dist/_internal/workflow-action-steps.js +75 -0
- package/dist/_internal/workflow-action-steps.js.map +1 -0
- package/dist/_internal/workflow-permissions.d.ts +11 -0
- package/dist/_internal/workflow-permissions.d.ts.map +1 -0
- package/dist/_internal/workflow-permissions.js +50 -0
- package/dist/_internal/workflow-permissions.js.map +1 -0
- package/dist/_internal/yaml-fixes.d.ts +13 -0
- package/dist/_internal/yaml-fixes.d.ts.map +1 -0
- package/dist/_internal/yaml-fixes.js +77 -0
- package/dist/_internal/yaml-fixes.js.map +1 -0
- package/dist/plugin.cjs +3524 -292
- package/dist/plugin.cjs.map +4 -4
- package/dist/plugin.d.ts.map +1 -1
- package/dist/plugin.js +2 -0
- package/dist/plugin.js.map +1 -1
- package/dist/rules/action-name-casing.d.ts.map +1 -1
- package/dist/rules/action-name-casing.js +3 -0
- package/dist/rules/action-name-casing.js.map +1 -1
- package/dist/rules/job-id-casing.d.ts.map +1 -1
- package/dist/rules/job-id-casing.js +3 -0
- package/dist/rules/job-id-casing.js.map +1 -1
- package/dist/rules/max-jobs-per-action.d.ts.map +1 -1
- package/dist/rules/max-jobs-per-action.js +3 -0
- package/dist/rules/max-jobs-per-action.js.map +1 -1
- package/dist/rules/no-case-insensitive-input-id-collision.d.ts.map +1 -1
- package/dist/rules/no-case-insensitive-input-id-collision.js +3 -0
- package/dist/rules/no-case-insensitive-input-id-collision.js.map +1 -1
- package/dist/rules/no-codeql-autobuild-for-javascript-typescript.d.ts +9 -0
- package/dist/rules/no-codeql-autobuild-for-javascript-typescript.d.ts.map +1 -0
- package/dist/rules/no-codeql-autobuild-for-javascript-typescript.js +54 -0
- package/dist/rules/no-codeql-autobuild-for-javascript-typescript.js.map +1 -0
- package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.d.ts +9 -0
- package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.d.ts.map +1 -0
- package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.js +50 -0
- package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.js.map +1 -0
- package/dist/rules/no-composite-input-env-access.d.ts.map +1 -1
- package/dist/rules/no-composite-input-env-access.js +3 -0
- package/dist/rules/no-composite-input-env-access.js.map +1 -1
- package/dist/rules/no-deprecated-node-runtime.d.ts.map +1 -1
- package/dist/rules/no-deprecated-node-runtime.js +3 -0
- package/dist/rules/no-deprecated-node-runtime.js.map +1 -1
- package/dist/rules/no-duplicate-composite-step-id.d.ts.map +1 -1
- package/dist/rules/no-duplicate-composite-step-id.js +3 -0
- package/dist/rules/no-duplicate-composite-step-id.js.map +1 -1
- package/dist/rules/no-empty-template-file-pattern.d.ts.map +1 -1
- package/dist/rules/no-empty-template-file-pattern.js +6 -0
- package/dist/rules/no-empty-template-file-pattern.js.map +1 -1
- package/dist/rules/no-external-job.d.ts.map +1 -1
- package/dist/rules/no-external-job.js +3 -0
- package/dist/rules/no-external-job.js.map +1 -1
- package/dist/rules/no-hardcoded-default-branch-in-template.d.ts.map +1 -1
- package/dist/rules/no-hardcoded-default-branch-in-template.js +3 -0
- package/dist/rules/no-hardcoded-default-branch-in-template.js.map +1 -1
- package/dist/rules/no-icon-file-extension-in-template-icon-name.d.ts.map +1 -1
- package/dist/rules/no-icon-file-extension-in-template-icon-name.js +13 -3
- package/dist/rules/no-icon-file-extension-in-template-icon-name.js.map +1 -1
- package/dist/rules/no-inherit-secrets.d.ts.map +1 -1
- package/dist/rules/no-inherit-secrets.js +3 -0
- package/dist/rules/no-inherit-secrets.js.map +1 -1
- package/dist/rules/no-invalid-concurrency-context.d.ts.map +1 -1
- package/dist/rules/no-invalid-concurrency-context.js +3 -0
- package/dist/rules/no-invalid-concurrency-context.js.map +1 -1
- package/dist/rules/no-invalid-key.d.ts.map +1 -1
- package/dist/rules/no-invalid-key.js +3 -0
- package/dist/rules/no-invalid-key.js.map +1 -1
- package/dist/rules/no-invalid-reusable-workflow-job-key.d.ts.map +1 -1
- package/dist/rules/no-invalid-reusable-workflow-job-key.js +3 -0
- package/dist/rules/no-invalid-reusable-workflow-job-key.js.map +1 -1
- package/dist/rules/no-invalid-template-file-pattern-regex.d.ts.map +1 -1
- package/dist/rules/no-invalid-template-file-pattern-regex.js +3 -0
- package/dist/rules/no-invalid-template-file-pattern-regex.js.map +1 -1
- package/dist/rules/no-invalid-workflow-call-output-value.d.ts.map +1 -1
- package/dist/rules/no-invalid-workflow-call-output-value.js +3 -0
- package/dist/rules/no-invalid-workflow-call-output-value.js.map +1 -1
- package/dist/rules/no-overlapping-dependabot-directories.d.ts +9 -0
- package/dist/rules/no-overlapping-dependabot-directories.d.ts.map +1 -0
- package/dist/rules/no-overlapping-dependabot-directories.js +151 -0
- package/dist/rules/no-overlapping-dependabot-directories.js.map +1 -0
- package/dist/rules/no-path-separators-in-template-icon-name.d.ts.map +1 -1
- package/dist/rules/no-path-separators-in-template-icon-name.js +26 -3
- package/dist/rules/no-path-separators-in-template-icon-name.js.map +1 -1
- package/dist/rules/no-post-if-without-post.d.ts.map +1 -1
- package/dist/rules/no-post-if-without-post.js +6 -0
- package/dist/rules/no-post-if-without-post.js.map +1 -1
- package/dist/rules/no-pr-head-checkout-in-pull-request-target.d.ts.map +1 -1
- package/dist/rules/no-pr-head-checkout-in-pull-request-target.js +3 -0
- package/dist/rules/no-pr-head-checkout-in-pull-request-target.js.map +1 -1
- package/dist/rules/no-pre-if-without-pre.d.ts.map +1 -1
- package/dist/rules/no-pre-if-without-pre.js +6 -0
- package/dist/rules/no-pre-if-without-pre.js.map +1 -1
- package/dist/rules/no-required-input-with-default.d.ts.map +1 -1
- package/dist/rules/no-required-input-with-default.js +23 -0
- package/dist/rules/no-required-input-with-default.js.map +1 -1
- package/dist/rules/no-secrets-in-if.d.ts.map +1 -1
- package/dist/rules/no-secrets-in-if.js +3 -0
- package/dist/rules/no-secrets-in-if.js.map +1 -1
- package/dist/rules/no-self-hosted-runner-on-fork-pr-events.d.ts.map +1 -1
- package/dist/rules/no-self-hosted-runner-on-fork-pr-events.js +3 -0
- package/dist/rules/no-self-hosted-runner-on-fork-pr-events.js.map +1 -1
- package/dist/rules/no-subdirectory-template-file-pattern.d.ts.map +1 -1
- package/dist/rules/no-subdirectory-template-file-pattern.js +3 -0
- package/dist/rules/no-subdirectory-template-file-pattern.js.map +1 -1
- package/dist/rules/no-template-placeholder-in-non-template-workflow.d.ts.map +1 -1
- package/dist/rules/no-template-placeholder-in-non-template-workflow.js +3 -0
- package/dist/rules/no-template-placeholder-in-non-template-workflow.js.map +1 -1
- package/dist/rules/no-top-level-env.d.ts.map +1 -1
- package/dist/rules/no-top-level-env.js +3 -0
- package/dist/rules/no-top-level-env.js.map +1 -1
- package/dist/rules/no-top-level-permissions.d.ts.map +1 -1
- package/dist/rules/no-top-level-permissions.js +3 -0
- package/dist/rules/no-top-level-permissions.js.map +1 -1
- package/dist/rules/no-universal-template-file-pattern.d.ts.map +1 -1
- package/dist/rules/no-universal-template-file-pattern.js +3 -0
- package/dist/rules/no-universal-template-file-pattern.js.map +1 -1
- package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.d.ts +9 -0
- package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.d.ts.map +1 -0
- package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.js +58 -0
- package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.js.map +1 -0
- package/dist/rules/no-unknown-input-reference-in-composite.d.ts.map +1 -1
- package/dist/rules/no-unknown-input-reference-in-composite.js +3 -0
- package/dist/rules/no-unknown-input-reference-in-composite.js.map +1 -1
- package/dist/rules/no-unknown-job-output-reference.d.ts.map +1 -1
- package/dist/rules/no-unknown-job-output-reference.js +3 -0
- package/dist/rules/no-unknown-job-output-reference.js.map +1 -1
- package/dist/rules/no-unknown-step-reference.d.ts.map +1 -1
- package/dist/rules/no-unknown-step-reference.js +3 -0
- package/dist/rules/no-unknown-step-reference.js.map +1 -1
- package/dist/rules/no-untrusted-input-in-run.d.ts.map +1 -1
- package/dist/rules/no-untrusted-input-in-run.js +3 -0
- package/dist/rules/no-untrusted-input-in-run.js.map +1 -1
- package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.d.ts +9 -0
- package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.d.ts.map +1 -0
- package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.js +51 -0
- package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.js.map +1 -0
- package/dist/rules/no-unused-input-in-composite.d.ts.map +1 -1
- package/dist/rules/no-unused-input-in-composite.js +3 -0
- package/dist/rules/no-unused-input-in-composite.js.map +1 -1
- package/dist/rules/no-write-all-permissions.d.ts.map +1 -1
- package/dist/rules/no-write-all-permissions.js +3 -0
- package/dist/rules/no-write-all-permissions.js.map +1 -1
- package/dist/rules/pin-action-shas.d.ts.map +1 -1
- package/dist/rules/pin-action-shas.js +3 -0
- package/dist/rules/pin-action-shas.js.map +1 -1
- package/dist/rules/prefer-action-yml.d.ts.map +1 -1
- package/dist/rules/prefer-action-yml.js +3 -0
- package/dist/rules/prefer-action-yml.js.map +1 -1
- package/dist/rules/prefer-fail-fast.d.ts.map +1 -1
- package/dist/rules/prefer-fail-fast.js +3 -0
- package/dist/rules/prefer-fail-fast.js.map +1 -1
- package/dist/rules/prefer-file-extension.d.ts.map +1 -1
- package/dist/rules/prefer-file-extension.js +3 -0
- package/dist/rules/prefer-file-extension.js.map +1 -1
- package/dist/rules/prefer-inputs-context.d.ts.map +1 -1
- package/dist/rules/prefer-inputs-context.js +3 -0
- package/dist/rules/prefer-inputs-context.js.map +1 -1
- package/dist/rules/prefer-step-uses-style.d.ts.map +1 -1
- package/dist/rules/prefer-step-uses-style.js +3 -0
- package/dist/rules/prefer-step-uses-style.js.map +1 -1
- package/dist/rules/prefer-template-yml-extension.d.ts.map +1 -1
- package/dist/rules/prefer-template-yml-extension.js +3 -0
- package/dist/rules/prefer-template-yml-extension.js.map +1 -1
- package/dist/rules/require-action-name.d.ts.map +1 -1
- package/dist/rules/require-action-name.js +3 -0
- package/dist/rules/require-action-name.js.map +1 -1
- package/dist/rules/require-action-run-name.d.ts.map +1 -1
- package/dist/rules/require-action-run-name.js +3 -0
- package/dist/rules/require-action-run-name.js.map +1 -1
- package/dist/rules/require-checkout-before-local-action.d.ts.map +1 -1
- package/dist/rules/require-checkout-before-local-action.js +3 -0
- package/dist/rules/require-checkout-before-local-action.js.map +1 -1
- package/dist/rules/require-codeql-actions-read.d.ts +9 -0
- package/dist/rules/require-codeql-actions-read.d.ts.map +1 -0
- package/dist/rules/require-codeql-actions-read.js +63 -0
- package/dist/rules/require-codeql-actions-read.js.map +1 -0
- package/dist/rules/require-codeql-branch-filters.d.ts +12 -0
- package/dist/rules/require-codeql-branch-filters.d.ts.map +1 -0
- package/dist/rules/require-codeql-branch-filters.js +83 -0
- package/dist/rules/require-codeql-branch-filters.js.map +1 -0
- package/dist/rules/require-codeql-category-when-language-matrix.d.ts +12 -0
- package/dist/rules/require-codeql-category-when-language-matrix.d.ts.map +1 -0
- package/dist/rules/require-codeql-category-when-language-matrix.js +68 -0
- package/dist/rules/require-codeql-category-when-language-matrix.js.map +1 -0
- package/dist/rules/require-codeql-pull-request-trigger.d.ts +9 -0
- package/dist/rules/require-codeql-pull-request-trigger.d.ts.map +1 -0
- package/dist/rules/require-codeql-pull-request-trigger.js +46 -0
- package/dist/rules/require-codeql-pull-request-trigger.js.map +1 -0
- package/dist/rules/require-codeql-schedule.d.ts +9 -0
- package/dist/rules/require-codeql-schedule.d.ts.map +1 -0
- package/dist/rules/require-codeql-schedule.js +46 -0
- package/dist/rules/require-codeql-schedule.js.map +1 -0
- package/dist/rules/require-codeql-security-events-write.d.ts +9 -0
- package/dist/rules/require-codeql-security-events-write.d.ts.map +1 -0
- package/dist/rules/require-codeql-security-events-write.js +53 -0
- package/dist/rules/require-codeql-security-events-write.js.map +1 -0
- package/dist/rules/require-composite-step-name.d.ts.map +1 -1
- package/dist/rules/require-composite-step-name.js +3 -0
- package/dist/rules/require-composite-step-name.js.map +1 -1
- package/dist/rules/require-dependabot-assignees.d.ts +9 -0
- package/dist/rules/require-dependabot-assignees.d.ts.map +1 -0
- package/dist/rules/require-dependabot-assignees.js +53 -0
- package/dist/rules/require-dependabot-assignees.js.map +1 -0
- package/dist/rules/require-dependabot-automation-permissions.d.ts +9 -0
- package/dist/rules/require-dependabot-automation-permissions.d.ts.map +1 -0
- package/dist/rules/require-dependabot-automation-permissions.js +68 -0
- package/dist/rules/require-dependabot-automation-permissions.js.map +1 -0
- package/dist/rules/require-dependabot-automation-pull-request-trigger.d.ts +12 -0
- package/dist/rules/require-dependabot-automation-pull-request-trigger.d.ts.map +1 -0
- package/dist/rules/require-dependabot-automation-pull-request-trigger.js +49 -0
- package/dist/rules/require-dependabot-automation-pull-request-trigger.js.map +1 -0
- package/dist/rules/require-dependabot-bot-actor-guard.d.ts +9 -0
- package/dist/rules/require-dependabot-bot-actor-guard.d.ts.map +1 -0
- package/dist/rules/require-dependabot-bot-actor-guard.js +64 -0
- package/dist/rules/require-dependabot-bot-actor-guard.js.map +1 -0
- package/dist/rules/require-dependabot-commit-message-include-scope.d.ts +9 -0
- package/dist/rules/require-dependabot-commit-message-include-scope.d.ts.map +1 -0
- package/dist/rules/require-dependabot-commit-message-include-scope.js +60 -0
- package/dist/rules/require-dependabot-commit-message-include-scope.js.map +1 -0
- package/dist/rules/require-dependabot-commit-message-prefix-development.d.ts +9 -0
- package/dist/rules/require-dependabot-commit-message-prefix-development.d.ts.map +1 -0
- package/dist/rules/require-dependabot-commit-message-prefix-development.js +75 -0
- package/dist/rules/require-dependabot-commit-message-prefix-development.js.map +1 -0
- package/dist/rules/require-dependabot-commit-message-prefix.d.ts +9 -0
- package/dist/rules/require-dependabot-commit-message-prefix.d.ts.map +1 -0
- package/dist/rules/require-dependabot-commit-message-prefix.js +60 -0
- package/dist/rules/require-dependabot-commit-message-prefix.js.map +1 -0
- package/dist/rules/require-dependabot-cooldown.d.ts +9 -0
- package/dist/rules/require-dependabot-cooldown.d.ts.map +1 -0
- package/dist/rules/require-dependabot-cooldown.js +52 -0
- package/dist/rules/require-dependabot-cooldown.js.map +1 -0
- package/dist/rules/require-dependabot-directory.d.ts +9 -0
- package/dist/rules/require-dependabot-directory.d.ts.map +1 -0
- package/dist/rules/require-dependabot-directory.js +68 -0
- package/dist/rules/require-dependabot-directory.js.map +1 -0
- package/dist/rules/require-dependabot-github-actions-directory-root.d.ts +9 -0
- package/dist/rules/require-dependabot-github-actions-directory-root.d.ts.map +1 -0
- package/dist/rules/require-dependabot-github-actions-directory-root.js +76 -0
- package/dist/rules/require-dependabot-github-actions-directory-root.js.map +1 -0
- package/dist/rules/require-dependabot-labels.d.ts +9 -0
- package/dist/rules/require-dependabot-labels.d.ts.map +1 -0
- package/dist/rules/require-dependabot-labels.js +52 -0
- package/dist/rules/require-dependabot-labels.js.map +1 -0
- package/dist/rules/require-dependabot-open-pull-requests-limit.d.ts +9 -0
- package/dist/rules/require-dependabot-open-pull-requests-limit.d.ts.map +1 -0
- package/dist/rules/require-dependabot-open-pull-requests-limit.js +55 -0
- package/dist/rules/require-dependabot-open-pull-requests-limit.js.map +1 -0
- package/dist/rules/require-dependabot-package-ecosystem.d.ts +9 -0
- package/dist/rules/require-dependabot-package-ecosystem.d.ts.map +1 -0
- package/dist/rules/require-dependabot-package-ecosystem.js +79 -0
- package/dist/rules/require-dependabot-package-ecosystem.js.map +1 -0
- package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.d.ts +9 -0
- package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.d.ts.map +1 -0
- package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.js +58 -0
- package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.js.map +1 -0
- package/dist/rules/require-dependabot-schedule-cronjob.d.ts +9 -0
- package/dist/rules/require-dependabot-schedule-cronjob.d.ts.map +1 -0
- package/dist/rules/require-dependabot-schedule-cronjob.js +82 -0
- package/dist/rules/require-dependabot-schedule-cronjob.js.map +1 -0
- package/dist/rules/require-dependabot-schedule-interval.d.ts +9 -0
- package/dist/rules/require-dependabot-schedule-interval.d.ts.map +1 -0
- package/dist/rules/require-dependabot-schedule-interval.js +73 -0
- package/dist/rules/require-dependabot-schedule-interval.js.map +1 -0
- package/dist/rules/require-dependabot-schedule-time.d.ts +9 -0
- package/dist/rules/require-dependabot-schedule-time.d.ts.map +1 -0
- package/dist/rules/require-dependabot-schedule-time.js +68 -0
- package/dist/rules/require-dependabot-schedule-time.js.map +1 -0
- package/dist/rules/require-dependabot-schedule-timezone.d.ts +9 -0
- package/dist/rules/require-dependabot-schedule-timezone.d.ts.map +1 -0
- package/dist/rules/require-dependabot-schedule-timezone.js +69 -0
- package/dist/rules/require-dependabot-schedule-timezone.js.map +1 -0
- package/dist/rules/require-dependabot-target-branch.d.ts +9 -0
- package/dist/rules/require-dependabot-target-branch.d.ts.map +1 -0
- package/dist/rules/require-dependabot-target-branch.js +53 -0
- package/dist/rules/require-dependabot-target-branch.js.map +1 -0
- package/dist/rules/require-dependabot-updates.d.ts +9 -0
- package/dist/rules/require-dependabot-updates.d.ts.map +1 -0
- package/dist/rules/require-dependabot-updates.js +54 -0
- package/dist/rules/require-dependabot-updates.js.map +1 -0
- package/dist/rules/require-dependabot-version.d.ts +9 -0
- package/dist/rules/require-dependabot-version.d.ts.map +1 -0
- package/dist/rules/require-dependabot-version.js +62 -0
- package/dist/rules/require-dependabot-version.js.map +1 -0
- package/dist/rules/require-dependabot-versioning-strategy-for-npm.d.ts +9 -0
- package/dist/rules/require-dependabot-versioning-strategy-for-npm.d.ts.map +1 -0
- package/dist/rules/require-dependabot-versioning-strategy-for-npm.js +58 -0
- package/dist/rules/require-dependabot-versioning-strategy-for-npm.js.map +1 -0
- package/dist/rules/require-dependency-review-action.d.ts +9 -0
- package/dist/rules/require-dependency-review-action.d.ts.map +1 -0
- package/dist/rules/require-dependency-review-action.js +51 -0
- package/dist/rules/require-dependency-review-action.js.map +1 -0
- package/dist/rules/require-dependency-review-fail-on-severity.d.ts +9 -0
- package/dist/rules/require-dependency-review-fail-on-severity.d.ts.map +1 -0
- package/dist/rules/require-dependency-review-fail-on-severity.js +62 -0
- package/dist/rules/require-dependency-review-fail-on-severity.js.map +1 -0
- package/dist/rules/require-dependency-review-permissions-contents-read.d.ts +9 -0
- package/dist/rules/require-dependency-review-permissions-contents-read.d.ts.map +1 -0
- package/dist/rules/require-dependency-review-permissions-contents-read.js +55 -0
- package/dist/rules/require-dependency-review-permissions-contents-read.js.map +1 -0
- package/dist/rules/require-dependency-review-pull-request-trigger.d.ts +9 -0
- package/dist/rules/require-dependency-review-pull-request-trigger.d.ts.map +1 -0
- package/dist/rules/require-dependency-review-pull-request-trigger.js +47 -0
- package/dist/rules/require-dependency-review-pull-request-trigger.js.map +1 -0
- package/dist/rules/require-fetch-metadata-github-token.d.ts +9 -0
- package/dist/rules/require-fetch-metadata-github-token.d.ts.map +1 -0
- package/dist/rules/require-fetch-metadata-github-token.js +57 -0
- package/dist/rules/require-fetch-metadata-github-token.js.map +1 -0
- package/dist/rules/require-job-name.d.ts.map +1 -1
- package/dist/rules/require-job-name.js +35 -0
- package/dist/rules/require-job-name.js.map +1 -1
- package/dist/rules/require-job-step-name.d.ts.map +1 -1
- package/dist/rules/require-job-step-name.js +76 -0
- package/dist/rules/require-job-step-name.js.map +1 -1
- package/dist/rules/require-job-timeout-minutes.d.ts.map +1 -1
- package/dist/rules/require-job-timeout-minutes.js +3 -0
- package/dist/rules/require-job-timeout-minutes.js.map +1 -1
- package/dist/rules/require-merge-group-trigger.d.ts.map +1 -1
- package/dist/rules/require-merge-group-trigger.js +3 -0
- package/dist/rules/require-merge-group-trigger.js.map +1 -1
- package/dist/rules/require-pull-request-target-branches.d.ts.map +1 -1
- package/dist/rules/require-pull-request-target-branches.js +3 -0
- package/dist/rules/require-pull-request-target-branches.js.map +1 -1
- package/dist/rules/require-run-step-shell.d.ts.map +1 -1
- package/dist/rules/require-run-step-shell.js +3 -0
- package/dist/rules/require-run-step-shell.js.map +1 -1
- package/dist/rules/require-sarif-upload-security-events-write.d.ts +9 -0
- package/dist/rules/require-sarif-upload-security-events-write.d.ts.map +1 -0
- package/dist/rules/require-sarif-upload-security-events-write.js +51 -0
- package/dist/rules/require-sarif-upload-security-events-write.js.map +1 -0
- package/dist/rules/require-scorecard-results-format-sarif.d.ts +9 -0
- package/dist/rules/require-scorecard-results-format-sarif.d.ts.map +1 -0
- package/dist/rules/require-scorecard-results-format-sarif.js +57 -0
- package/dist/rules/require-scorecard-results-format-sarif.js.map +1 -0
- package/dist/rules/require-scorecard-upload-sarif-step.d.ts +9 -0
- package/dist/rules/require-scorecard-upload-sarif-step.d.ts.map +1 -0
- package/dist/rules/require-scorecard-upload-sarif-step.js +46 -0
- package/dist/rules/require-scorecard-upload-sarif-step.js.map +1 -0
- package/dist/rules/require-secret-scan-contents-read.d.ts +12 -0
- package/dist/rules/require-secret-scan-contents-read.d.ts.map +1 -0
- package/dist/rules/require-secret-scan-contents-read.js +53 -0
- package/dist/rules/require-secret-scan-contents-read.js.map +1 -0
- package/dist/rules/require-secret-scan-fetch-depth-zero.d.ts +9 -0
- package/dist/rules/require-secret-scan-fetch-depth-zero.d.ts.map +1 -0
- package/dist/rules/require-secret-scan-fetch-depth-zero.js +77 -0
- package/dist/rules/require-secret-scan-fetch-depth-zero.js.map +1 -0
- package/dist/rules/require-secret-scan-schedule.d.ts +9 -0
- package/dist/rules/require-secret-scan-schedule.d.ts.map +1 -0
- package/dist/rules/require-secret-scan-schedule.js +46 -0
- package/dist/rules/require-secret-scan-schedule.js.map +1 -0
- package/dist/rules/require-template-categories.d.ts.map +1 -1
- package/dist/rules/require-template-categories.js +3 -0
- package/dist/rules/require-template-categories.js.map +1 -1
- package/dist/rules/require-template-file-patterns.d.ts.map +1 -1
- package/dist/rules/require-template-file-patterns.js +3 -0
- package/dist/rules/require-template-file-patterns.js.map +1 -1
- package/dist/rules/require-template-icon-file-exists.d.ts.map +1 -1
- package/dist/rules/require-template-icon-file-exists.js +3 -0
- package/dist/rules/require-template-icon-file-exists.js.map +1 -1
- package/dist/rules/require-template-icon-name.d.ts.map +1 -1
- package/dist/rules/require-template-icon-name.js +3 -0
- package/dist/rules/require-template-icon-name.js.map +1 -1
- package/dist/rules/require-template-workflow-name.d.ts.map +1 -1
- package/dist/rules/require-template-workflow-name.js +3 -0
- package/dist/rules/require-template-workflow-name.js.map +1 -1
- package/dist/rules/require-trigger-types.d.ts.map +1 -1
- package/dist/rules/require-trigger-types.js +3 -0
- package/dist/rules/require-trigger-types.js.map +1 -1
- package/dist/rules/require-trufflehog-verified-results-mode.d.ts +9 -0
- package/dist/rules/require-trufflehog-verified-results-mode.d.ts.map +1 -0
- package/dist/rules/require-trufflehog-verified-results-mode.js +59 -0
- package/dist/rules/require-trufflehog-verified-results-mode.js.map +1 -0
- package/dist/rules/require-workflow-call-input-type.d.ts.map +1 -1
- package/dist/rules/require-workflow-call-input-type.js +3 -0
- package/dist/rules/require-workflow-call-input-type.js.map +1 -1
- package/dist/rules/require-workflow-call-output-value.d.ts.map +1 -1
- package/dist/rules/require-workflow-call-output-value.js +3 -0
- package/dist/rules/require-workflow-call-output-value.js.map +1 -1
- package/dist/rules/require-workflow-concurrency.d.ts.map +1 -1
- package/dist/rules/require-workflow-concurrency.js +3 -0
- package/dist/rules/require-workflow-concurrency.js.map +1 -1
- package/dist/rules/require-workflow-dispatch-input-type.d.ts.map +1 -1
- package/dist/rules/require-workflow-dispatch-input-type.js +3 -0
- package/dist/rules/require-workflow-dispatch-input-type.js.map +1 -1
- package/dist/rules/require-workflow-interface-description.d.ts.map +1 -1
- package/dist/rules/require-workflow-interface-description.js +3 -0
- package/dist/rules/require-workflow-interface-description.js.map +1 -1
- package/dist/rules/require-workflow-permissions.d.ts.map +1 -1
- package/dist/rules/require-workflow-permissions.js +3 -0
- package/dist/rules/require-workflow-permissions.js.map +1 -1
- package/dist/rules/require-workflow-run-branches.d.ts.map +1 -1
- package/dist/rules/require-workflow-run-branches.js +3 -0
- package/dist/rules/require-workflow-run-branches.js.map +1 -1
- package/dist/rules/require-workflow-template-pair.d.ts.map +1 -1
- package/dist/rules/require-workflow-template-pair.js +3 -0
- package/dist/rules/require-workflow-template-pair.js.map +1 -1
- package/dist/rules/require-workflow-template-properties-pair.d.ts.map +1 -1
- package/dist/rules/require-workflow-template-properties-pair.js +3 -0
- package/dist/rules/require-workflow-template-properties-pair.js.map +1 -1
- package/dist/rules/valid-timeout-minutes.d.ts.map +1 -1
- package/dist/rules/valid-timeout-minutes.js +3 -0
- package/dist/rules/valid-timeout-minutes.js.map +1 -1
- package/dist/rules/valid-trigger-events.d.ts.map +1 -1
- package/dist/rules/valid-trigger-events.js +3 -0
- package/dist/rules/valid-trigger-events.js.map +1 -1
- package/docs/rules/action-name-casing.md +6 -2
- package/docs/rules/no-codeql-autobuild-for-javascript-typescript.md +55 -0
- package/docs/rules/no-codeql-javascript-typescript-split-language-matrix.md +51 -0
- package/docs/rules/no-empty-template-file-pattern.md +5 -1
- package/docs/rules/no-icon-file-extension-in-template-icon-name.md +5 -1
- package/docs/rules/no-overlapping-dependabot-directories.md +87 -0
- package/docs/rules/no-path-separators-in-template-icon-name.md +5 -1
- package/docs/rules/no-post-if-without-post.md +5 -1
- package/docs/rules/no-pre-if-without-pre.md +5 -1
- package/docs/rules/no-required-input-with-default.md +10 -1
- package/docs/rules/no-unknown-dependabot-multi-ecosystem-group.md +62 -0
- package/docs/rules/no-unused-dependabot-enable-beta-ecosystems.md +63 -0
- package/docs/rules/overview.md +47 -1
- package/docs/rules/prefer-inputs-context.md +6 -2
- package/docs/rules/presets/action-metadata.md +22 -11
- package/docs/rules/presets/all.md +125 -69
- package/docs/rules/presets/code-scanning.md +33 -0
- package/docs/rules/presets/dependabot.md +40 -0
- package/docs/rules/presets/index.md +139 -81
- package/docs/rules/presets/recommended.md +30 -19
- package/docs/rules/presets/security.md +35 -9
- package/docs/rules/presets/strict.md +52 -41
- package/docs/rules/presets/workflow-template-properties.md +22 -11
- package/docs/rules/presets/workflow-templates.md +26 -15
- package/docs/rules/require-codeql-actions-read.md +50 -0
- package/docs/rules/require-codeql-branch-filters.md +53 -0
- package/docs/rules/require-codeql-category-when-language-matrix.md +49 -0
- package/docs/rules/require-codeql-pull-request-trigger.md +53 -0
- package/docs/rules/require-codeql-schedule.md +57 -0
- package/docs/rules/require-codeql-security-events-write.md +50 -0
- package/docs/rules/require-dependabot-assignees.md +64 -0
- package/docs/rules/require-dependabot-automation-permissions.md +53 -0
- package/docs/rules/require-dependabot-automation-pull-request-trigger.md +49 -0
- package/docs/rules/require-dependabot-bot-actor-guard.md +52 -0
- package/docs/rules/require-dependabot-commit-message-include-scope.md +58 -0
- package/docs/rules/require-dependabot-commit-message-prefix-development.md +60 -0
- package/docs/rules/require-dependabot-commit-message-prefix.md +64 -0
- package/docs/rules/require-dependabot-cooldown.md +59 -0
- package/docs/rules/require-dependabot-directory.md +79 -0
- package/docs/rules/require-dependabot-github-actions-directory-root.md +62 -0
- package/docs/rules/require-dependabot-labels.md +65 -0
- package/docs/rules/require-dependabot-open-pull-requests-limit.md +58 -0
- package/docs/rules/require-dependabot-package-ecosystem.md +57 -0
- package/docs/rules/require-dependabot-patterns-for-multi-ecosystem-group.md +67 -0
- package/docs/rules/require-dependabot-schedule-cronjob.md +74 -0
- package/docs/rules/require-dependabot-schedule-interval.md +66 -0
- package/docs/rules/require-dependabot-schedule-time.md +60 -0
- package/docs/rules/require-dependabot-schedule-timezone.md +61 -0
- package/docs/rules/require-dependabot-target-branch.md +63 -0
- package/docs/rules/require-dependabot-updates.md +58 -0
- package/docs/rules/require-dependabot-version.md +70 -0
- package/docs/rules/require-dependabot-versioning-strategy-for-npm.md +58 -0
- package/docs/rules/require-dependency-review-action.md +60 -0
- package/docs/rules/require-dependency-review-fail-on-severity.md +57 -0
- package/docs/rules/require-dependency-review-permissions-contents-read.md +62 -0
- package/docs/rules/require-dependency-review-pull-request-trigger.md +57 -0
- package/docs/rules/require-fetch-metadata-github-token.md +49 -0
- package/docs/rules/require-job-name.md +6 -2
- package/docs/rules/require-job-step-name.md +11 -2
- package/docs/rules/require-sarif-upload-security-events-write.md +50 -0
- package/docs/rules/require-scorecard-results-format-sarif.md +49 -0
- package/docs/rules/require-scorecard-upload-sarif-step.md +55 -0
- package/docs/rules/require-secret-scan-contents-read.md +48 -0
- package/docs/rules/require-secret-scan-fetch-depth-zero.md +50 -0
- package/docs/rules/require-secret-scan-schedule.md +50 -0
- package/docs/rules/require-trufflehog-verified-results-mode.md +49 -0
- package/package.json +50 -57
|
@@ -2,6 +2,8 @@ import actionNameCasing from "../rules/action-name-casing.js";
|
|
|
2
2
|
import jobIdCasing from "../rules/job-id-casing.js";
|
|
3
3
|
import maxJobsPerAction from "../rules/max-jobs-per-action.js";
|
|
4
4
|
import noCaseInsensitiveInputIdCollision from "../rules/no-case-insensitive-input-id-collision.js";
|
|
5
|
+
import noCodeqlAutobuildForJavaScriptTypeScript from "../rules/no-codeql-autobuild-for-javascript-typescript.js";
|
|
6
|
+
import noCodeqlJavascriptTypeScriptSplitLanguageMatrix from "../rules/no-codeql-javascript-typescript-split-language-matrix.js";
|
|
5
7
|
import noCompositeInputEnvAccess from "../rules/no-composite-input-env-access.js";
|
|
6
8
|
import noDeprecatedNodeRuntime from "../rules/no-deprecated-node-runtime.js";
|
|
7
9
|
import noDuplicateCompositeStepId from "../rules/no-duplicate-composite-step-id.js";
|
|
@@ -15,6 +17,7 @@ import noInvalidKey from "../rules/no-invalid-key.js";
|
|
|
15
17
|
import noInvalidReusableWorkflowJobKey from "../rules/no-invalid-reusable-workflow-job-key.js";
|
|
16
18
|
import noInvalidTemplateFilePatternRegex from "../rules/no-invalid-template-file-pattern-regex.js";
|
|
17
19
|
import noInvalidWorkflowCallOutputValue from "../rules/no-invalid-workflow-call-output-value.js";
|
|
20
|
+
import noOverlappingDependabotDirectories from "../rules/no-overlapping-dependabot-directories.js";
|
|
18
21
|
import noPathSeparatorsInTemplateIconName from "../rules/no-path-separators-in-template-icon-name.js";
|
|
19
22
|
import noPostIfWithoutPost from "../rules/no-post-if-without-post.js";
|
|
20
23
|
import noPrHeadCheckoutInPullRequestTarget from "../rules/no-pr-head-checkout-in-pull-request-target.js";
|
|
@@ -27,10 +30,12 @@ import noTemplatePlaceholderInNonTemplateWorkflow from "../rules/no-template-pla
|
|
|
27
30
|
import noTopLevelEnv from "../rules/no-top-level-env.js";
|
|
28
31
|
import noTopLevelPermissions from "../rules/no-top-level-permissions.js";
|
|
29
32
|
import noUniversalTemplateFilePattern from "../rules/no-universal-template-file-pattern.js";
|
|
33
|
+
import noUnknownDependabotMultiEcosystemGroup from "../rules/no-unknown-dependabot-multi-ecosystem-group.js";
|
|
30
34
|
import noUnknownInputReferenceInComposite from "../rules/no-unknown-input-reference-in-composite.js";
|
|
31
35
|
import noUnknownJobOutputReference from "../rules/no-unknown-job-output-reference.js";
|
|
32
36
|
import noUnknownStepReference from "../rules/no-unknown-step-reference.js";
|
|
33
37
|
import noUntrustedInputInRun from "../rules/no-untrusted-input-in-run.js";
|
|
38
|
+
import noUnusedDependabotEnableBetaEcosystems from "../rules/no-unused-dependabot-enable-beta-ecosystems.js";
|
|
34
39
|
import noUnusedInputInComposite from "../rules/no-unused-input-in-composite.js";
|
|
35
40
|
import noWriteAllPermissions from "../rules/no-write-all-permissions.js";
|
|
36
41
|
import pinActionShas from "../rules/pin-action-shas.js";
|
|
@@ -43,19 +48,59 @@ import preferTemplateYmlExtension from "../rules/prefer-template-yml-extension.j
|
|
|
43
48
|
import requireActionName from "../rules/require-action-name.js";
|
|
44
49
|
import requireActionRunName from "../rules/require-action-run-name.js";
|
|
45
50
|
import requireCheckoutBeforeLocalAction from "../rules/require-checkout-before-local-action.js";
|
|
51
|
+
import requireCodeqlActionsRead from "../rules/require-codeql-actions-read.js";
|
|
52
|
+
import requireCodeqlBranchFilters from "../rules/require-codeql-branch-filters.js";
|
|
53
|
+
import requireCodeqlCategoryWhenLanguageMatrix from "../rules/require-codeql-category-when-language-matrix.js";
|
|
54
|
+
import requireCodeqlPullRequestTrigger from "../rules/require-codeql-pull-request-trigger.js";
|
|
55
|
+
import requireCodeqlSchedule from "../rules/require-codeql-schedule.js";
|
|
56
|
+
import requireCodeqlSecurityEventsWrite from "../rules/require-codeql-security-events-write.js";
|
|
46
57
|
import requireCompositeStepName from "../rules/require-composite-step-name.js";
|
|
58
|
+
import requireDependabotAssignees from "../rules/require-dependabot-assignees.js";
|
|
59
|
+
import requireDependabotAutomationPermissions from "../rules/require-dependabot-automation-permissions.js";
|
|
60
|
+
import requireDependabotAutomationPullRequestTrigger from "../rules/require-dependabot-automation-pull-request-trigger.js";
|
|
61
|
+
import requireDependabotBotActorGuard from "../rules/require-dependabot-bot-actor-guard.js";
|
|
62
|
+
import requireDependabotCommitMessageIncludeScope from "../rules/require-dependabot-commit-message-include-scope.js";
|
|
63
|
+
import requireDependabotCommitMessagePrefixDevelopment from "../rules/require-dependabot-commit-message-prefix-development.js";
|
|
64
|
+
import requireDependabotCommitMessagePrefix from "../rules/require-dependabot-commit-message-prefix.js";
|
|
65
|
+
import requireDependabotCooldown from "../rules/require-dependabot-cooldown.js";
|
|
66
|
+
import requireDependabotDirectory from "../rules/require-dependabot-directory.js";
|
|
67
|
+
import requireDependabotGithubActionsDirectoryRoot from "../rules/require-dependabot-github-actions-directory-root.js";
|
|
68
|
+
import requireDependabotLabels from "../rules/require-dependabot-labels.js";
|
|
69
|
+
import requireDependabotOpenPullRequestsLimit from "../rules/require-dependabot-open-pull-requests-limit.js";
|
|
70
|
+
import requireDependabotPackageEcosystem from "../rules/require-dependabot-package-ecosystem.js";
|
|
71
|
+
import requireDependabotPatternsForMultiEcosystemGroup from "../rules/require-dependabot-patterns-for-multi-ecosystem-group.js";
|
|
72
|
+
import requireDependabotScheduleCronjob from "../rules/require-dependabot-schedule-cronjob.js";
|
|
73
|
+
import requireDependabotScheduleInterval from "../rules/require-dependabot-schedule-interval.js";
|
|
74
|
+
import requireDependabotScheduleTime from "../rules/require-dependabot-schedule-time.js";
|
|
75
|
+
import requireDependabotScheduleTimezone from "../rules/require-dependabot-schedule-timezone.js";
|
|
76
|
+
import requireDependabotTargetBranch from "../rules/require-dependabot-target-branch.js";
|
|
77
|
+
import requireDependabotUpdates from "../rules/require-dependabot-updates.js";
|
|
78
|
+
import requireDependabotVersion from "../rules/require-dependabot-version.js";
|
|
79
|
+
import requireDependabotVersioningStrategyForNpm from "../rules/require-dependabot-versioning-strategy-for-npm.js";
|
|
80
|
+
import requireDependencyReviewAction from "../rules/require-dependency-review-action.js";
|
|
81
|
+
import requireDependencyReviewFailOnSeverity from "../rules/require-dependency-review-fail-on-severity.js";
|
|
82
|
+
import requireDependencyReviewPermissionsContentsRead from "../rules/require-dependency-review-permissions-contents-read.js";
|
|
83
|
+
import requireDependencyReviewPullRequestTrigger from "../rules/require-dependency-review-pull-request-trigger.js";
|
|
84
|
+
import requireFetchMetadataGithubToken from "../rules/require-fetch-metadata-github-token.js";
|
|
47
85
|
import requireJobName from "../rules/require-job-name.js";
|
|
48
86
|
import requireJobStepName from "../rules/require-job-step-name.js";
|
|
49
87
|
import requireJobTimeoutMinutes from "../rules/require-job-timeout-minutes.js";
|
|
50
88
|
import requireMergeGroupTrigger from "../rules/require-merge-group-trigger.js";
|
|
51
89
|
import requirePullRequestTargetBranches from "../rules/require-pull-request-target-branches.js";
|
|
52
90
|
import requireRunStepShell from "../rules/require-run-step-shell.js";
|
|
91
|
+
import requireSarifUploadSecurityEventsWrite from "../rules/require-sarif-upload-security-events-write.js";
|
|
92
|
+
import requireScorecardResultsFormatSarif from "../rules/require-scorecard-results-format-sarif.js";
|
|
93
|
+
import requireScorecardUploadSarifStep from "../rules/require-scorecard-upload-sarif-step.js";
|
|
94
|
+
import requireSecretScanContentsRead from "../rules/require-secret-scan-contents-read.js";
|
|
95
|
+
import requireSecretScanFetchDepthZero from "../rules/require-secret-scan-fetch-depth-zero.js";
|
|
96
|
+
import requireSecretScanSchedule from "../rules/require-secret-scan-schedule.js";
|
|
53
97
|
import requireTemplateCategories from "../rules/require-template-categories.js";
|
|
54
98
|
import requireTemplateFilePatterns from "../rules/require-template-file-patterns.js";
|
|
55
99
|
import requireTemplateIconFileExists from "../rules/require-template-icon-file-exists.js";
|
|
56
100
|
import requireTemplateIconName from "../rules/require-template-icon-name.js";
|
|
57
101
|
import requireTemplateWorkflowName from "../rules/require-template-workflow-name.js";
|
|
58
102
|
import requireTriggerTypes from "../rules/require-trigger-types.js";
|
|
103
|
+
import requireTrufflehogVerifiedResultsMode from "../rules/require-trufflehog-verified-results-mode.js";
|
|
59
104
|
import requireWorkflowCallInputType from "../rules/require-workflow-call-input-type.js";
|
|
60
105
|
import requireWorkflowCallOutputValue from "../rules/require-workflow-call-output-value.js";
|
|
61
106
|
import requireWorkflowConcurrency from "../rules/require-workflow-concurrency.js";
|
|
@@ -73,6 +118,8 @@ declare const githubActionsRulesDefinition: {
|
|
|
73
118
|
readonly "job-id-casing": typeof jobIdCasing;
|
|
74
119
|
readonly "max-jobs-per-action": typeof maxJobsPerAction;
|
|
75
120
|
readonly "no-case-insensitive-input-id-collision": typeof noCaseInsensitiveInputIdCollision;
|
|
121
|
+
readonly "no-codeql-autobuild-for-javascript-typescript": typeof noCodeqlAutobuildForJavaScriptTypeScript;
|
|
122
|
+
readonly "no-codeql-javascript-typescript-split-language-matrix": typeof noCodeqlJavascriptTypeScriptSplitLanguageMatrix;
|
|
76
123
|
readonly "no-composite-input-env-access": typeof noCompositeInputEnvAccess;
|
|
77
124
|
readonly "no-deprecated-node-runtime": typeof noDeprecatedNodeRuntime;
|
|
78
125
|
readonly "no-duplicate-composite-step-id": typeof noDuplicateCompositeStepId;
|
|
@@ -86,6 +133,7 @@ declare const githubActionsRulesDefinition: {
|
|
|
86
133
|
readonly "no-invalid-reusable-workflow-job-key": typeof noInvalidReusableWorkflowJobKey;
|
|
87
134
|
readonly "no-invalid-template-file-pattern-regex": typeof noInvalidTemplateFilePatternRegex;
|
|
88
135
|
readonly "no-invalid-workflow-call-output-value": typeof noInvalidWorkflowCallOutputValue;
|
|
136
|
+
readonly "no-overlapping-dependabot-directories": typeof noOverlappingDependabotDirectories;
|
|
89
137
|
readonly "no-path-separators-in-template-icon-name": typeof noPathSeparatorsInTemplateIconName;
|
|
90
138
|
readonly "no-post-if-without-post": typeof noPostIfWithoutPost;
|
|
91
139
|
readonly "no-pr-head-checkout-in-pull-request-target": typeof noPrHeadCheckoutInPullRequestTarget;
|
|
@@ -98,10 +146,12 @@ declare const githubActionsRulesDefinition: {
|
|
|
98
146
|
readonly "no-top-level-env": typeof noTopLevelEnv;
|
|
99
147
|
readonly "no-top-level-permissions": typeof noTopLevelPermissions;
|
|
100
148
|
readonly "no-universal-template-file-pattern": typeof noUniversalTemplateFilePattern;
|
|
149
|
+
readonly "no-unknown-dependabot-multi-ecosystem-group": typeof noUnknownDependabotMultiEcosystemGroup;
|
|
101
150
|
readonly "no-unknown-input-reference-in-composite": typeof noUnknownInputReferenceInComposite;
|
|
102
151
|
readonly "no-unknown-job-output-reference": typeof noUnknownJobOutputReference;
|
|
103
152
|
readonly "no-unknown-step-reference": typeof noUnknownStepReference;
|
|
104
153
|
readonly "no-untrusted-input-in-run": typeof noUntrustedInputInRun;
|
|
154
|
+
readonly "no-unused-dependabot-enable-beta-ecosystems": typeof noUnusedDependabotEnableBetaEcosystems;
|
|
105
155
|
readonly "no-unused-input-in-composite": typeof noUnusedInputInComposite;
|
|
106
156
|
readonly "no-write-all-permissions": typeof noWriteAllPermissions;
|
|
107
157
|
readonly "pin-action-shas": typeof pinActionShas;
|
|
@@ -114,19 +164,59 @@ declare const githubActionsRulesDefinition: {
|
|
|
114
164
|
readonly "require-action-name": typeof requireActionName;
|
|
115
165
|
readonly "require-action-run-name": typeof requireActionRunName;
|
|
116
166
|
readonly "require-checkout-before-local-action": typeof requireCheckoutBeforeLocalAction;
|
|
167
|
+
readonly "require-codeql-actions-read": typeof requireCodeqlActionsRead;
|
|
168
|
+
readonly "require-codeql-branch-filters": typeof requireCodeqlBranchFilters;
|
|
169
|
+
readonly "require-codeql-category-when-language-matrix": typeof requireCodeqlCategoryWhenLanguageMatrix;
|
|
170
|
+
readonly "require-codeql-pull-request-trigger": typeof requireCodeqlPullRequestTrigger;
|
|
171
|
+
readonly "require-codeql-schedule": typeof requireCodeqlSchedule;
|
|
172
|
+
readonly "require-codeql-security-events-write": typeof requireCodeqlSecurityEventsWrite;
|
|
117
173
|
readonly "require-composite-step-name": typeof requireCompositeStepName;
|
|
174
|
+
readonly "require-dependabot-assignees": typeof requireDependabotAssignees;
|
|
175
|
+
readonly "require-dependabot-automation-permissions": typeof requireDependabotAutomationPermissions;
|
|
176
|
+
readonly "require-dependabot-automation-pull-request-trigger": typeof requireDependabotAutomationPullRequestTrigger;
|
|
177
|
+
readonly "require-dependabot-bot-actor-guard": typeof requireDependabotBotActorGuard;
|
|
178
|
+
readonly "require-dependabot-commit-message-include-scope": typeof requireDependabotCommitMessageIncludeScope;
|
|
179
|
+
readonly "require-dependabot-commit-message-prefix": typeof requireDependabotCommitMessagePrefix;
|
|
180
|
+
readonly "require-dependabot-commit-message-prefix-development": typeof requireDependabotCommitMessagePrefixDevelopment;
|
|
181
|
+
readonly "require-dependabot-cooldown": typeof requireDependabotCooldown;
|
|
182
|
+
readonly "require-dependabot-directory": typeof requireDependabotDirectory;
|
|
183
|
+
readonly "require-dependabot-github-actions-directory-root": typeof requireDependabotGithubActionsDirectoryRoot;
|
|
184
|
+
readonly "require-dependabot-labels": typeof requireDependabotLabels;
|
|
185
|
+
readonly "require-dependabot-open-pull-requests-limit": typeof requireDependabotOpenPullRequestsLimit;
|
|
186
|
+
readonly "require-dependabot-package-ecosystem": typeof requireDependabotPackageEcosystem;
|
|
187
|
+
readonly "require-dependabot-patterns-for-multi-ecosystem-group": typeof requireDependabotPatternsForMultiEcosystemGroup;
|
|
188
|
+
readonly "require-dependabot-schedule-cronjob": typeof requireDependabotScheduleCronjob;
|
|
189
|
+
readonly "require-dependabot-schedule-interval": typeof requireDependabotScheduleInterval;
|
|
190
|
+
readonly "require-dependabot-schedule-time": typeof requireDependabotScheduleTime;
|
|
191
|
+
readonly "require-dependabot-schedule-timezone": typeof requireDependabotScheduleTimezone;
|
|
192
|
+
readonly "require-dependabot-target-branch": typeof requireDependabotTargetBranch;
|
|
193
|
+
readonly "require-dependabot-updates": typeof requireDependabotUpdates;
|
|
194
|
+
readonly "require-dependabot-version": typeof requireDependabotVersion;
|
|
195
|
+
readonly "require-dependabot-versioning-strategy-for-npm": typeof requireDependabotVersioningStrategyForNpm;
|
|
196
|
+
readonly "require-dependency-review-action": typeof requireDependencyReviewAction;
|
|
197
|
+
readonly "require-dependency-review-fail-on-severity": typeof requireDependencyReviewFailOnSeverity;
|
|
198
|
+
readonly "require-dependency-review-permissions-contents-read": typeof requireDependencyReviewPermissionsContentsRead;
|
|
199
|
+
readonly "require-dependency-review-pull-request-trigger": typeof requireDependencyReviewPullRequestTrigger;
|
|
200
|
+
readonly "require-fetch-metadata-github-token": typeof requireFetchMetadataGithubToken;
|
|
118
201
|
readonly "require-job-name": typeof requireJobName;
|
|
119
202
|
readonly "require-job-step-name": typeof requireJobStepName;
|
|
120
203
|
readonly "require-job-timeout-minutes": typeof requireJobTimeoutMinutes;
|
|
121
204
|
readonly "require-merge-group-trigger": typeof requireMergeGroupTrigger;
|
|
122
205
|
readonly "require-pull-request-target-branches": typeof requirePullRequestTargetBranches;
|
|
123
206
|
readonly "require-run-step-shell": typeof requireRunStepShell;
|
|
207
|
+
readonly "require-sarif-upload-security-events-write": typeof requireSarifUploadSecurityEventsWrite;
|
|
208
|
+
readonly "require-scorecard-results-format-sarif": typeof requireScorecardResultsFormatSarif;
|
|
209
|
+
readonly "require-scorecard-upload-sarif-step": typeof requireScorecardUploadSarifStep;
|
|
210
|
+
readonly "require-secret-scan-contents-read": typeof requireSecretScanContentsRead;
|
|
211
|
+
readonly "require-secret-scan-fetch-depth-zero": typeof requireSecretScanFetchDepthZero;
|
|
212
|
+
readonly "require-secret-scan-schedule": typeof requireSecretScanSchedule;
|
|
124
213
|
readonly "require-template-categories": typeof requireTemplateCategories;
|
|
125
214
|
readonly "require-template-file-patterns": typeof requireTemplateFilePatterns;
|
|
126
215
|
readonly "require-template-icon-file-exists": typeof requireTemplateIconFileExists;
|
|
127
216
|
readonly "require-template-icon-name": typeof requireTemplateIconName;
|
|
128
217
|
readonly "require-template-workflow-name": typeof requireTemplateWorkflowName;
|
|
129
218
|
readonly "require-trigger-types": typeof requireTriggerTypes;
|
|
219
|
+
readonly "require-trufflehog-verified-results-mode": typeof requireTrufflehogVerifiedResultsMode;
|
|
130
220
|
readonly "require-workflow-call-input-type": typeof requireWorkflowCallInputType;
|
|
131
221
|
readonly "require-workflow-call-output-value": typeof requireWorkflowCallOutputValue;
|
|
132
222
|
readonly "require-workflow-concurrency": typeof requireWorkflowConcurrency;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rules-registry.d.ts","sourceRoot":"","sources":["../../src/_internal/rules-registry.ts"],"names":[],"mappings":"AAMA,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,WAAW,MAAM,2BAA2B,CAAC;AACpD,OAAO,gBAAgB,MAAM,iCAAiC,CAAC;AAC/D,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,yBAAyB,MAAM,2CAA2C,CAAC;AAClF,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,qCAAqC,MAAM,0DAA0D,CAAC;AAC7G,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,YAAY,MAAM,4BAA4B,CAAC;AACtD,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,gCAAgC,MAAM,mDAAmD,CAAC;AACjG,OAAO,kCAAkC,MAAM,sDAAsD,CAAC;AACtG,OAAO,mBAAmB,MAAM,qCAAqC,CAAC;AACtE,OAAO,mCAAmC,MAAM,wDAAwD,CAAC;AACzG,OAAO,iBAAiB,MAAM,mCAAmC,CAAC;AAClE,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,gCAAgC,MAAM,qDAAqD,CAAC;AACnG,OAAO,iCAAiC,MAAM,mDAAmD,CAAC;AAClG,OAAO,0CAA0C,MAAM,8DAA8D,CAAC;AACtH,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,2BAA2B,MAAM,6CAA6C,CAAC;AACtF,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,uCAAuC,CAAC;AAC1E,OAAO,wBAAwB,MAAM,0CAA0C,CAAC;AAChF,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,eAAe,MAAM,+BAA+B,CAAC;AAC5D,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,iBAAiB,MAAM,iCAAiC,CAAC;AAChE,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,kBAAkB,MAAM,mCAAmC,CAAC;AACnE,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,4BAA4B,MAAM,8CAA8C,CAAC;AACxF,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mCAAmC,MAAM,oDAAoD,CAAC;AACrG,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,qCAAqC,MAAM,uDAAuD,CAAC;AAC1G,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,kBAAkB,MAAM,kCAAkC,CAAC;AAElE,0EAA0E;AAC1E,QAAA,MAAM,4BAA4B,EAAE;IAChC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,gBAAgB,CAAC;IACvD,QAAQ,CAAC,eAAe,EAAE,OAAO,WAAW,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,EAAE,OAAO,gBAAgB,CAAC;IACxD,QAAQ,CAAC,wCAAwC,EAAE,OAAO,iCAAiC,CAAC;IAC5F,QAAQ,CAAC,+BAA+B,EAAE,OAAO,yBAAyB,CAAC;IAC3E,QAAQ,CAAC,4BAA4B,EAAE,OAAO,uBAAuB,CAAC;IACtE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,iBAAiB,EAAE,OAAO,aAAa,CAAC;IACjD,QAAQ,CAAC,yCAAyC,EAAE,OAAO,kCAAkC,CAAC;IAC9F,QAAQ,CAAC,8CAA8C,EAAE,OAAO,qCAAqC,CAAC;IACtG,QAAQ,CAAC,oBAAoB,EAAE,OAAO,gBAAgB,CAAC;IACvD,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,gBAAgB,EAAE,OAAO,YAAY,CAAC;IAC/C,QAAQ,CAAC,sCAAsC,EAAE,OAAO,+BAA+B,CAAC;IACxF,QAAQ,CAAC,wCAAwC,EAAE,OAAO,iCAAiC,CAAC;IAC5F,QAAQ,CAAC,uCAAuC,EAAE,OAAO,gCAAgC,CAAC;IAC1F,QAAQ,CAAC,0CAA0C,EAAE,OAAO,kCAAkC,CAAC;IAC/F,QAAQ,CAAC,yBAAyB,EAAE,OAAO,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,4CAA4C,EAAE,OAAO,mCAAmC,CAAC;IAClG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,iBAAiB,CAAC;IAC3D,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,kBAAkB,EAAE,OAAO,aAAa,CAAC;IAClD,QAAQ,CAAC,yCAAyC,EAAE,OAAO,gCAAgC,CAAC;IAC5F,QAAQ,CAAC,uCAAuC,EAAE,OAAO,iCAAiC,CAAC;IAC3F,QAAQ,CAAC,kDAAkD,EAAE,OAAO,0CAA0C,CAAC;IAC/G,QAAQ,CAAC,kBAAkB,EAAE,OAAO,aAAa,CAAC;IAClD,QAAQ,CAAC,0BAA0B,EAAE,OAAO,qBAAqB,CAAC;IAClE,QAAQ,CAAC,oCAAoC,EAAE,OAAO,8BAA8B,CAAC;IACrF,QAAQ,CAAC,yCAAyC,EAAE,OAAO,kCAAkC,CAAC;IAC9F,QAAQ,CAAC,iCAAiC,EAAE,OAAO,2BAA2B,CAAC;IAC/E,QAAQ,CAAC,2BAA2B,EAAE,OAAO,sBAAsB,CAAC;IACpE,QAAQ,CAAC,2BAA2B,EAAE,OAAO,qBAAqB,CAAC;IACnE,QAAQ,CAAC,8BAA8B,EAAE,OAAO,wBAAwB,CAAC;IACzE,QAAQ,CAAC,0BAA0B,EAAE,OAAO,qBAAqB,CAAC;IAClE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,aAAa,CAAC;IACjD,QAAQ,CAAC,mBAAmB,EAAE,OAAO,eAAe,CAAC;IACrD,QAAQ,CAAC,kBAAkB,EAAE,OAAO,cAAc,CAAC;IACnD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,wBAAwB,EAAE,OAAO,mBAAmB,CAAC;IAC9D,QAAQ,CAAC,+BAA+B,EAAE,OAAO,0BAA0B,CAAC;IAC5E,QAAQ,CAAC,qBAAqB,EAAE,OAAO,iBAAiB,CAAC;IACzD,QAAQ,CAAC,yBAAyB,EAAE,OAAO,oBAAoB,CAAC;IAChE,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,cAAc,CAAC;IACnD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,kBAAkB,CAAC;IAC5D,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,wBAAwB,EAAE,OAAO,mBAAmB,CAAC;IAC9D,QAAQ,CAAC,6BAA6B,EAAE,OAAO,yBAAyB,CAAC;IACzE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,mCAAmC,EAAE,OAAO,6BAA6B,CAAC;IACnF,QAAQ,CAAC,4BAA4B,EAAE,OAAO,uBAAuB,CAAC;IACtE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,kCAAkC,EAAE,OAAO,4BAA4B,CAAC;IACjF,QAAQ,CAAC,oCAAoC,EAAE,OAAO,8BAA8B,CAAC;IACrF,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,wCAAwC,EAAE,OAAO,mCAAmC,CAAC;IAC9F,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,+BAA+B,EAAE,OAAO,0BAA0B,CAAC;IAC5E,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,2CAA2C,EAAE,OAAO,qCAAqC,CAAC;IACnG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,sBAAsB,EAAE,OAAO,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"rules-registry.d.ts","sourceRoot":"","sources":["../../src/_internal/rules-registry.ts"],"names":[],"mappings":"AAMA,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,WAAW,MAAM,2BAA2B,CAAC;AACpD,OAAO,gBAAgB,MAAM,iCAAiC,CAAC;AAC/D,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,wCAAwC,MAAM,2DAA2D,CAAC;AACjH,OAAO,+CAA+C,MAAM,mEAAmE,CAAC;AAChI,OAAO,yBAAyB,MAAM,2CAA2C,CAAC;AAClF,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,qCAAqC,MAAM,0DAA0D,CAAC;AAC7G,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,YAAY,MAAM,4BAA4B,CAAC;AACtD,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,gCAAgC,MAAM,mDAAmD,CAAC;AACjG,OAAO,kCAAkC,MAAM,mDAAmD,CAAC;AACnG,OAAO,kCAAkC,MAAM,sDAAsD,CAAC;AACtG,OAAO,mBAAmB,MAAM,qCAAqC,CAAC;AACtE,OAAO,mCAAmC,MAAM,wDAAwD,CAAC;AACzG,OAAO,iBAAiB,MAAM,mCAAmC,CAAC;AAClE,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,gCAAgC,MAAM,qDAAqD,CAAC;AACnG,OAAO,iCAAiC,MAAM,mDAAmD,CAAC;AAClG,OAAO,0CAA0C,MAAM,8DAA8D,CAAC;AACtH,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,2BAA2B,MAAM,6CAA6C,CAAC;AACtF,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,uCAAuC,CAAC;AAC1E,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,wBAAwB,MAAM,0CAA0C,CAAC;AAChF,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,eAAe,MAAM,+BAA+B,CAAC;AAC5D,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,iBAAiB,MAAM,iCAAiC,CAAC;AAChE,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,uCAAuC,MAAM,0DAA0D,CAAC;AAC/G,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,qBAAqB,MAAM,qCAAqC,CAAC;AACxE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,sCAAsC,MAAM,uDAAuD,CAAC;AAC3G,OAAO,6CAA6C,MAAM,gEAAgE,CAAC;AAC3H,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0CAA0C,MAAM,6DAA6D,CAAC;AACrH,OAAO,+CAA+C,MAAM,kEAAkE,CAAC;AAC/H,OAAO,oCAAoC,MAAM,sDAAsD,CAAC;AACxG,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,2CAA2C,MAAM,8DAA8D,CAAC;AACvH,OAAO,uBAAuB,MAAM,uCAAuC,CAAC;AAC5E,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,+CAA+C,MAAM,mEAAmE,CAAC;AAChI,OAAO,gCAAgC,MAAM,iDAAiD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,yCAAyC,MAAM,4DAA4D,CAAC;AACnH,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,qCAAqC,MAAM,wDAAwD,CAAC;AAC3G,OAAO,8CAA8C,MAAM,iEAAiE,CAAC;AAC7H,OAAO,yCAAyC,MAAM,4DAA4D,CAAC;AACnH,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,kBAAkB,MAAM,mCAAmC,CAAC;AACnE,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,qCAAqC,MAAM,wDAAwD,CAAC;AAC3G,OAAO,kCAAkC,MAAM,oDAAoD,CAAC;AACpG,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,yBAAyB,MAAM,0CAA0C,CAAC;AACjF,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,oCAAoC,MAAM,sDAAsD,CAAC;AACxG,OAAO,4BAA4B,MAAM,8CAA8C,CAAC;AACxF,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mCAAmC,MAAM,oDAAoD,CAAC;AACrG,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,qCAAqC,MAAM,uDAAuD,CAAC;AAC1G,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,kBAAkB,MAAM,kCAAkC,CAAC;AAElE,0EAA0E;AAC1E,QAAA,MAAM,4BAA4B,EAAE;IAChC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,gBAAgB,CAAC;IACvD,QAAQ,CAAC,eAAe,EAAE,OAAO,WAAW,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,EAAE,OAAO,gBAAgB,CAAC;IACxD,QAAQ,CAAC,wCAAwC,EAAE,OAAO,iCAAiC,CAAC;IAC5F,QAAQ,CAAC,+CAA+C,EAAE,OAAO,wCAAwC,CAAC;IAC1G,QAAQ,CAAC,uDAAuD,EAAE,OAAO,+CAA+C,CAAC;IACzH,QAAQ,CAAC,+BAA+B,EAAE,OAAO,yBAAyB,CAAC;IAC3E,QAAQ,CAAC,4BAA4B,EAAE,OAAO,uBAAuB,CAAC;IACtE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,iBAAiB,EAAE,OAAO,aAAa,CAAC;IACjD,QAAQ,CAAC,yCAAyC,EAAE,OAAO,kCAAkC,CAAC;IAC9F,QAAQ,CAAC,8CAA8C,EAAE,OAAO,qCAAqC,CAAC;IACtG,QAAQ,CAAC,oBAAoB,EAAE,OAAO,gBAAgB,CAAC;IACvD,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,gBAAgB,EAAE,OAAO,YAAY,CAAC;IAC/C,QAAQ,CAAC,sCAAsC,EAAE,OAAO,+BAA+B,CAAC;IACxF,QAAQ,CAAC,wCAAwC,EAAE,OAAO,iCAAiC,CAAC;IAC5F,QAAQ,CAAC,uCAAuC,EAAE,OAAO,gCAAgC,CAAC;IAC1F,QAAQ,CAAC,uCAAuC,EAAE,OAAO,kCAAkC,CAAC;IAC5F,QAAQ,CAAC,0CAA0C,EAAE,OAAO,kCAAkC,CAAC;IAC/F,QAAQ,CAAC,yBAAyB,EAAE,OAAO,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,4CAA4C,EAAE,OAAO,mCAAmC,CAAC;IAClG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,iBAAiB,CAAC;IAC3D,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,kBAAkB,EAAE,OAAO,aAAa,CAAC;IAClD,QAAQ,CAAC,yCAAyC,EAAE,OAAO,gCAAgC,CAAC;IAC5F,QAAQ,CAAC,uCAAuC,EAAE,OAAO,iCAAiC,CAAC;IAC3F,QAAQ,CAAC,kDAAkD,EAAE,OAAO,0CAA0C,CAAC;IAC/G,QAAQ,CAAC,kBAAkB,EAAE,OAAO,aAAa,CAAC;IAClD,QAAQ,CAAC,0BAA0B,EAAE,OAAO,qBAAqB,CAAC;IAClE,QAAQ,CAAC,oCAAoC,EAAE,OAAO,8BAA8B,CAAC;IACrF,QAAQ,CAAC,6CAA6C,EAAE,OAAO,sCAAsC,CAAC;IACtG,QAAQ,CAAC,yCAAyC,EAAE,OAAO,kCAAkC,CAAC;IAC9F,QAAQ,CAAC,iCAAiC,EAAE,OAAO,2BAA2B,CAAC;IAC/E,QAAQ,CAAC,2BAA2B,EAAE,OAAO,sBAAsB,CAAC;IACpE,QAAQ,CAAC,2BAA2B,EAAE,OAAO,qBAAqB,CAAC;IACnE,QAAQ,CAAC,6CAA6C,EAAE,OAAO,sCAAsC,CAAC;IACtG,QAAQ,CAAC,8BAA8B,EAAE,OAAO,wBAAwB,CAAC;IACzE,QAAQ,CAAC,0BAA0B,EAAE,OAAO,qBAAqB,CAAC;IAClE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,aAAa,CAAC;IACjD,QAAQ,CAAC,mBAAmB,EAAE,OAAO,eAAe,CAAC;IACrD,QAAQ,CAAC,kBAAkB,EAAE,OAAO,cAAc,CAAC;IACnD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,wBAAwB,EAAE,OAAO,mBAAmB,CAAC;IAC9D,QAAQ,CAAC,+BAA+B,EAAE,OAAO,0BAA0B,CAAC;IAC5E,QAAQ,CAAC,qBAAqB,EAAE,OAAO,iBAAiB,CAAC;IACzD,QAAQ,CAAC,yBAAyB,EAAE,OAAO,oBAAoB,CAAC;IAChE,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,+BAA+B,EAAE,OAAO,0BAA0B,CAAC;IAC5E,QAAQ,CAAC,8CAA8C,EAAE,OAAO,uCAAuC,CAAC;IACxG,QAAQ,CAAC,qCAAqC,EAAE,OAAO,+BAA+B,CAAC;IACvF,QAAQ,CAAC,yBAAyB,EAAE,OAAO,qBAAqB,CAAC;IACjE,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,2CAA2C,EAAE,OAAO,sCAAsC,CAAC;IACpG,QAAQ,CAAC,oDAAoD,EAAE,OAAO,6CAA6C,CAAC;IACpH,QAAQ,CAAC,oCAAoC,EAAE,OAAO,8BAA8B,CAAC;IACrF,QAAQ,CAAC,iDAAiD,EAAE,OAAO,0CAA0C,CAAC;IAC9G,QAAQ,CAAC,0CAA0C,EAAE,OAAO,oCAAoC,CAAC;IACjG,QAAQ,CAAC,sDAAsD,EAAE,OAAO,+CAA+C,CAAC;IACxH,QAAQ,CAAC,6BAA6B,EAAE,OAAO,yBAAyB,CAAC;IACzE,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,kDAAkD,EAAE,OAAO,2CAA2C,CAAC;IAChH,QAAQ,CAAC,2BAA2B,EAAE,OAAO,uBAAuB,CAAC;IACrE,QAAQ,CAAC,6CAA6C,EAAE,OAAO,sCAAsC,CAAC;IACtG,QAAQ,CAAC,sCAAsC,EAAE,OAAO,iCAAiC,CAAC;IAC1F,QAAQ,CAAC,uDAAuD,EAAE,OAAO,+CAA+C,CAAC;IACzH,QAAQ,CAAC,qCAAqC,EAAE,OAAO,gCAAgC,CAAC;IACxF,QAAQ,CAAC,sCAAsC,EAAE,OAAO,iCAAiC,CAAC;IAC1F,QAAQ,CAAC,kCAAkC,EAAE,OAAO,6BAA6B,CAAC;IAClF,QAAQ,CAAC,sCAAsC,EAAE,OAAO,iCAAiC,CAAC;IAC1F,QAAQ,CAAC,kCAAkC,EAAE,OAAO,6BAA6B,CAAC;IAClF,QAAQ,CAAC,4BAA4B,EAAE,OAAO,wBAAwB,CAAC;IACvE,QAAQ,CAAC,4BAA4B,EAAE,OAAO,wBAAwB,CAAC;IACvE,QAAQ,CAAC,gDAAgD,EAAE,OAAO,yCAAyC,CAAC;IAC5G,QAAQ,CAAC,kCAAkC,EAAE,OAAO,6BAA6B,CAAC;IAClF,QAAQ,CAAC,4CAA4C,EAAE,OAAO,qCAAqC,CAAC;IACpG,QAAQ,CAAC,qDAAqD,EAAE,OAAO,8CAA8C,CAAC;IACtH,QAAQ,CAAC,gDAAgD,EAAE,OAAO,yCAAyC,CAAC;IAC5G,QAAQ,CAAC,qCAAqC,EAAE,OAAO,+BAA+B,CAAC;IACvF,QAAQ,CAAC,kBAAkB,EAAE,OAAO,cAAc,CAAC;IACnD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,kBAAkB,CAAC;IAC5D,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,wBAAwB,EAAE,OAAO,mBAAmB,CAAC;IAC9D,QAAQ,CAAC,4CAA4C,EAAE,OAAO,qCAAqC,CAAC;IACpG,QAAQ,CAAC,wCAAwC,EAAE,OAAO,kCAAkC,CAAC;IAC7F,QAAQ,CAAC,qCAAqC,EAAE,OAAO,+BAA+B,CAAC;IACvF,QAAQ,CAAC,mCAAmC,EAAE,OAAO,6BAA6B,CAAC;IACnF,QAAQ,CAAC,sCAAsC,EAAE,OAAO,+BAA+B,CAAC;IACxF,QAAQ,CAAC,8BAA8B,EAAE,OAAO,yBAAyB,CAAC;IAC1E,QAAQ,CAAC,6BAA6B,EAAE,OAAO,yBAAyB,CAAC;IACzE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,mCAAmC,EAAE,OAAO,6BAA6B,CAAC;IACnF,QAAQ,CAAC,4BAA4B,EAAE,OAAO,uBAAuB,CAAC;IACtE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,0CAA0C,EAAE,OAAO,oCAAoC,CAAC;IACjG,QAAQ,CAAC,kCAAkC,EAAE,OAAO,4BAA4B,CAAC;IACjF,QAAQ,CAAC,oCAAoC,EAAE,OAAO,8BAA8B,CAAC;IACrF,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,wCAAwC,EAAE,OAAO,mCAAmC,CAAC;IAC9F,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,+BAA+B,EAAE,OAAO,0BAA0B,CAAC;IAC5E,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,2CAA2C,EAAE,OAAO,qCAAqC,CAAC;IACnG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,sBAAsB,EAAE,OAAO,kBAAkB,CAAC;CAgJpB,CAAC;AAE5C,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,EAAE,OAAO,4BACR,CAAC"}
|
|
@@ -2,6 +2,8 @@ import actionNameCasing from "../rules/action-name-casing.js";
|
|
|
2
2
|
import jobIdCasing from "../rules/job-id-casing.js";
|
|
3
3
|
import maxJobsPerAction from "../rules/max-jobs-per-action.js";
|
|
4
4
|
import noCaseInsensitiveInputIdCollision from "../rules/no-case-insensitive-input-id-collision.js";
|
|
5
|
+
import noCodeqlAutobuildForJavaScriptTypeScript from "../rules/no-codeql-autobuild-for-javascript-typescript.js";
|
|
6
|
+
import noCodeqlJavascriptTypeScriptSplitLanguageMatrix from "../rules/no-codeql-javascript-typescript-split-language-matrix.js";
|
|
5
7
|
import noCompositeInputEnvAccess from "../rules/no-composite-input-env-access.js";
|
|
6
8
|
import noDeprecatedNodeRuntime from "../rules/no-deprecated-node-runtime.js";
|
|
7
9
|
import noDuplicateCompositeStepId from "../rules/no-duplicate-composite-step-id.js";
|
|
@@ -15,6 +17,7 @@ import noInvalidKey from "../rules/no-invalid-key.js";
|
|
|
15
17
|
import noInvalidReusableWorkflowJobKey from "../rules/no-invalid-reusable-workflow-job-key.js";
|
|
16
18
|
import noInvalidTemplateFilePatternRegex from "../rules/no-invalid-template-file-pattern-regex.js";
|
|
17
19
|
import noInvalidWorkflowCallOutputValue from "../rules/no-invalid-workflow-call-output-value.js";
|
|
20
|
+
import noOverlappingDependabotDirectories from "../rules/no-overlapping-dependabot-directories.js";
|
|
18
21
|
import noPathSeparatorsInTemplateIconName from "../rules/no-path-separators-in-template-icon-name.js";
|
|
19
22
|
import noPostIfWithoutPost from "../rules/no-post-if-without-post.js";
|
|
20
23
|
import noPrHeadCheckoutInPullRequestTarget from "../rules/no-pr-head-checkout-in-pull-request-target.js";
|
|
@@ -27,10 +30,12 @@ import noTemplatePlaceholderInNonTemplateWorkflow from "../rules/no-template-pla
|
|
|
27
30
|
import noTopLevelEnv from "../rules/no-top-level-env.js";
|
|
28
31
|
import noTopLevelPermissions from "../rules/no-top-level-permissions.js";
|
|
29
32
|
import noUniversalTemplateFilePattern from "../rules/no-universal-template-file-pattern.js";
|
|
33
|
+
import noUnknownDependabotMultiEcosystemGroup from "../rules/no-unknown-dependabot-multi-ecosystem-group.js";
|
|
30
34
|
import noUnknownInputReferenceInComposite from "../rules/no-unknown-input-reference-in-composite.js";
|
|
31
35
|
import noUnknownJobOutputReference from "../rules/no-unknown-job-output-reference.js";
|
|
32
36
|
import noUnknownStepReference from "../rules/no-unknown-step-reference.js";
|
|
33
37
|
import noUntrustedInputInRun from "../rules/no-untrusted-input-in-run.js";
|
|
38
|
+
import noUnusedDependabotEnableBetaEcosystems from "../rules/no-unused-dependabot-enable-beta-ecosystems.js";
|
|
34
39
|
import noUnusedInputInComposite from "../rules/no-unused-input-in-composite.js";
|
|
35
40
|
import noWriteAllPermissions from "../rules/no-write-all-permissions.js";
|
|
36
41
|
import pinActionShas from "../rules/pin-action-shas.js";
|
|
@@ -43,19 +48,59 @@ import preferTemplateYmlExtension from "../rules/prefer-template-yml-extension.j
|
|
|
43
48
|
import requireActionName from "../rules/require-action-name.js";
|
|
44
49
|
import requireActionRunName from "../rules/require-action-run-name.js";
|
|
45
50
|
import requireCheckoutBeforeLocalAction from "../rules/require-checkout-before-local-action.js";
|
|
51
|
+
import requireCodeqlActionsRead from "../rules/require-codeql-actions-read.js";
|
|
52
|
+
import requireCodeqlBranchFilters from "../rules/require-codeql-branch-filters.js";
|
|
53
|
+
import requireCodeqlCategoryWhenLanguageMatrix from "../rules/require-codeql-category-when-language-matrix.js";
|
|
54
|
+
import requireCodeqlPullRequestTrigger from "../rules/require-codeql-pull-request-trigger.js";
|
|
55
|
+
import requireCodeqlSchedule from "../rules/require-codeql-schedule.js";
|
|
56
|
+
import requireCodeqlSecurityEventsWrite from "../rules/require-codeql-security-events-write.js";
|
|
46
57
|
import requireCompositeStepName from "../rules/require-composite-step-name.js";
|
|
58
|
+
import requireDependabotAssignees from "../rules/require-dependabot-assignees.js";
|
|
59
|
+
import requireDependabotAutomationPermissions from "../rules/require-dependabot-automation-permissions.js";
|
|
60
|
+
import requireDependabotAutomationPullRequestTrigger from "../rules/require-dependabot-automation-pull-request-trigger.js";
|
|
61
|
+
import requireDependabotBotActorGuard from "../rules/require-dependabot-bot-actor-guard.js";
|
|
62
|
+
import requireDependabotCommitMessageIncludeScope from "../rules/require-dependabot-commit-message-include-scope.js";
|
|
63
|
+
import requireDependabotCommitMessagePrefixDevelopment from "../rules/require-dependabot-commit-message-prefix-development.js";
|
|
64
|
+
import requireDependabotCommitMessagePrefix from "../rules/require-dependabot-commit-message-prefix.js";
|
|
65
|
+
import requireDependabotCooldown from "../rules/require-dependabot-cooldown.js";
|
|
66
|
+
import requireDependabotDirectory from "../rules/require-dependabot-directory.js";
|
|
67
|
+
import requireDependabotGithubActionsDirectoryRoot from "../rules/require-dependabot-github-actions-directory-root.js";
|
|
68
|
+
import requireDependabotLabels from "../rules/require-dependabot-labels.js";
|
|
69
|
+
import requireDependabotOpenPullRequestsLimit from "../rules/require-dependabot-open-pull-requests-limit.js";
|
|
70
|
+
import requireDependabotPackageEcosystem from "../rules/require-dependabot-package-ecosystem.js";
|
|
71
|
+
import requireDependabotPatternsForMultiEcosystemGroup from "../rules/require-dependabot-patterns-for-multi-ecosystem-group.js";
|
|
72
|
+
import requireDependabotScheduleCronjob from "../rules/require-dependabot-schedule-cronjob.js";
|
|
73
|
+
import requireDependabotScheduleInterval from "../rules/require-dependabot-schedule-interval.js";
|
|
74
|
+
import requireDependabotScheduleTime from "../rules/require-dependabot-schedule-time.js";
|
|
75
|
+
import requireDependabotScheduleTimezone from "../rules/require-dependabot-schedule-timezone.js";
|
|
76
|
+
import requireDependabotTargetBranch from "../rules/require-dependabot-target-branch.js";
|
|
77
|
+
import requireDependabotUpdates from "../rules/require-dependabot-updates.js";
|
|
78
|
+
import requireDependabotVersion from "../rules/require-dependabot-version.js";
|
|
79
|
+
import requireDependabotVersioningStrategyForNpm from "../rules/require-dependabot-versioning-strategy-for-npm.js";
|
|
80
|
+
import requireDependencyReviewAction from "../rules/require-dependency-review-action.js";
|
|
81
|
+
import requireDependencyReviewFailOnSeverity from "../rules/require-dependency-review-fail-on-severity.js";
|
|
82
|
+
import requireDependencyReviewPermissionsContentsRead from "../rules/require-dependency-review-permissions-contents-read.js";
|
|
83
|
+
import requireDependencyReviewPullRequestTrigger from "../rules/require-dependency-review-pull-request-trigger.js";
|
|
84
|
+
import requireFetchMetadataGithubToken from "../rules/require-fetch-metadata-github-token.js";
|
|
47
85
|
import requireJobName from "../rules/require-job-name.js";
|
|
48
86
|
import requireJobStepName from "../rules/require-job-step-name.js";
|
|
49
87
|
import requireJobTimeoutMinutes from "../rules/require-job-timeout-minutes.js";
|
|
50
88
|
import requireMergeGroupTrigger from "../rules/require-merge-group-trigger.js";
|
|
51
89
|
import requirePullRequestTargetBranches from "../rules/require-pull-request-target-branches.js";
|
|
52
90
|
import requireRunStepShell from "../rules/require-run-step-shell.js";
|
|
91
|
+
import requireSarifUploadSecurityEventsWrite from "../rules/require-sarif-upload-security-events-write.js";
|
|
92
|
+
import requireScorecardResultsFormatSarif from "../rules/require-scorecard-results-format-sarif.js";
|
|
93
|
+
import requireScorecardUploadSarifStep from "../rules/require-scorecard-upload-sarif-step.js";
|
|
94
|
+
import requireSecretScanContentsRead from "../rules/require-secret-scan-contents-read.js";
|
|
95
|
+
import requireSecretScanFetchDepthZero from "../rules/require-secret-scan-fetch-depth-zero.js";
|
|
96
|
+
import requireSecretScanSchedule from "../rules/require-secret-scan-schedule.js";
|
|
53
97
|
import requireTemplateCategories from "../rules/require-template-categories.js";
|
|
54
98
|
import requireTemplateFilePatterns from "../rules/require-template-file-patterns.js";
|
|
55
99
|
import requireTemplateIconFileExists from "../rules/require-template-icon-file-exists.js";
|
|
56
100
|
import requireTemplateIconName from "../rules/require-template-icon-name.js";
|
|
57
101
|
import requireTemplateWorkflowName from "../rules/require-template-workflow-name.js";
|
|
58
102
|
import requireTriggerTypes from "../rules/require-trigger-types.js";
|
|
103
|
+
import requireTrufflehogVerifiedResultsMode from "../rules/require-trufflehog-verified-results-mode.js";
|
|
59
104
|
import requireWorkflowCallInputType from "../rules/require-workflow-call-input-type.js";
|
|
60
105
|
import requireWorkflowCallOutputValue from "../rules/require-workflow-call-output-value.js";
|
|
61
106
|
import requireWorkflowConcurrency from "../rules/require-workflow-concurrency.js";
|
|
@@ -73,6 +118,8 @@ const githubActionsRulesDefinition = {
|
|
|
73
118
|
"job-id-casing": jobIdCasing,
|
|
74
119
|
"max-jobs-per-action": maxJobsPerAction,
|
|
75
120
|
"no-case-insensitive-input-id-collision": noCaseInsensitiveInputIdCollision,
|
|
121
|
+
"no-codeql-autobuild-for-javascript-typescript": noCodeqlAutobuildForJavaScriptTypeScript,
|
|
122
|
+
"no-codeql-javascript-typescript-split-language-matrix": noCodeqlJavascriptTypeScriptSplitLanguageMatrix,
|
|
76
123
|
"no-composite-input-env-access": noCompositeInputEnvAccess,
|
|
77
124
|
"no-deprecated-node-runtime": noDeprecatedNodeRuntime,
|
|
78
125
|
"no-duplicate-composite-step-id": noDuplicateCompositeStepId,
|
|
@@ -86,6 +133,7 @@ const githubActionsRulesDefinition = {
|
|
|
86
133
|
"no-invalid-reusable-workflow-job-key": noInvalidReusableWorkflowJobKey,
|
|
87
134
|
"no-invalid-template-file-pattern-regex": noInvalidTemplateFilePatternRegex,
|
|
88
135
|
"no-invalid-workflow-call-output-value": noInvalidWorkflowCallOutputValue,
|
|
136
|
+
"no-overlapping-dependabot-directories": noOverlappingDependabotDirectories,
|
|
89
137
|
"no-path-separators-in-template-icon-name": noPathSeparatorsInTemplateIconName,
|
|
90
138
|
"no-post-if-without-post": noPostIfWithoutPost,
|
|
91
139
|
"no-pr-head-checkout-in-pull-request-target": noPrHeadCheckoutInPullRequestTarget,
|
|
@@ -98,10 +146,12 @@ const githubActionsRulesDefinition = {
|
|
|
98
146
|
"no-top-level-env": noTopLevelEnv,
|
|
99
147
|
"no-top-level-permissions": noTopLevelPermissions,
|
|
100
148
|
"no-universal-template-file-pattern": noUniversalTemplateFilePattern,
|
|
149
|
+
"no-unknown-dependabot-multi-ecosystem-group": noUnknownDependabotMultiEcosystemGroup,
|
|
101
150
|
"no-unknown-input-reference-in-composite": noUnknownInputReferenceInComposite,
|
|
102
151
|
"no-unknown-job-output-reference": noUnknownJobOutputReference,
|
|
103
152
|
"no-unknown-step-reference": noUnknownStepReference,
|
|
104
153
|
"no-untrusted-input-in-run": noUntrustedInputInRun,
|
|
154
|
+
"no-unused-dependabot-enable-beta-ecosystems": noUnusedDependabotEnableBetaEcosystems,
|
|
105
155
|
"no-unused-input-in-composite": noUnusedInputInComposite,
|
|
106
156
|
"no-write-all-permissions": noWriteAllPermissions,
|
|
107
157
|
"pin-action-shas": pinActionShas,
|
|
@@ -114,19 +164,59 @@ const githubActionsRulesDefinition = {
|
|
|
114
164
|
"require-action-name": requireActionName,
|
|
115
165
|
"require-action-run-name": requireActionRunName,
|
|
116
166
|
"require-checkout-before-local-action": requireCheckoutBeforeLocalAction,
|
|
167
|
+
"require-codeql-actions-read": requireCodeqlActionsRead,
|
|
168
|
+
"require-codeql-branch-filters": requireCodeqlBranchFilters,
|
|
169
|
+
"require-codeql-category-when-language-matrix": requireCodeqlCategoryWhenLanguageMatrix,
|
|
170
|
+
"require-codeql-pull-request-trigger": requireCodeqlPullRequestTrigger,
|
|
171
|
+
"require-codeql-schedule": requireCodeqlSchedule,
|
|
172
|
+
"require-codeql-security-events-write": requireCodeqlSecurityEventsWrite,
|
|
117
173
|
"require-composite-step-name": requireCompositeStepName,
|
|
174
|
+
"require-dependabot-assignees": requireDependabotAssignees,
|
|
175
|
+
"require-dependabot-automation-permissions": requireDependabotAutomationPermissions,
|
|
176
|
+
"require-dependabot-automation-pull-request-trigger": requireDependabotAutomationPullRequestTrigger,
|
|
177
|
+
"require-dependabot-bot-actor-guard": requireDependabotBotActorGuard,
|
|
178
|
+
"require-dependabot-commit-message-include-scope": requireDependabotCommitMessageIncludeScope,
|
|
179
|
+
"require-dependabot-commit-message-prefix": requireDependabotCommitMessagePrefix,
|
|
180
|
+
"require-dependabot-commit-message-prefix-development": requireDependabotCommitMessagePrefixDevelopment,
|
|
181
|
+
"require-dependabot-cooldown": requireDependabotCooldown,
|
|
182
|
+
"require-dependabot-directory": requireDependabotDirectory,
|
|
183
|
+
"require-dependabot-github-actions-directory-root": requireDependabotGithubActionsDirectoryRoot,
|
|
184
|
+
"require-dependabot-labels": requireDependabotLabels,
|
|
185
|
+
"require-dependabot-open-pull-requests-limit": requireDependabotOpenPullRequestsLimit,
|
|
186
|
+
"require-dependabot-package-ecosystem": requireDependabotPackageEcosystem,
|
|
187
|
+
"require-dependabot-patterns-for-multi-ecosystem-group": requireDependabotPatternsForMultiEcosystemGroup,
|
|
188
|
+
"require-dependabot-schedule-cronjob": requireDependabotScheduleCronjob,
|
|
189
|
+
"require-dependabot-schedule-interval": requireDependabotScheduleInterval,
|
|
190
|
+
"require-dependabot-schedule-time": requireDependabotScheduleTime,
|
|
191
|
+
"require-dependabot-schedule-timezone": requireDependabotScheduleTimezone,
|
|
192
|
+
"require-dependabot-target-branch": requireDependabotTargetBranch,
|
|
193
|
+
"require-dependabot-updates": requireDependabotUpdates,
|
|
194
|
+
"require-dependabot-version": requireDependabotVersion,
|
|
195
|
+
"require-dependabot-versioning-strategy-for-npm": requireDependabotVersioningStrategyForNpm,
|
|
196
|
+
"require-dependency-review-action": requireDependencyReviewAction,
|
|
197
|
+
"require-dependency-review-fail-on-severity": requireDependencyReviewFailOnSeverity,
|
|
198
|
+
"require-dependency-review-permissions-contents-read": requireDependencyReviewPermissionsContentsRead,
|
|
199
|
+
"require-dependency-review-pull-request-trigger": requireDependencyReviewPullRequestTrigger,
|
|
200
|
+
"require-fetch-metadata-github-token": requireFetchMetadataGithubToken,
|
|
118
201
|
"require-job-name": requireJobName,
|
|
119
202
|
"require-job-step-name": requireJobStepName,
|
|
120
203
|
"require-job-timeout-minutes": requireJobTimeoutMinutes,
|
|
121
204
|
"require-merge-group-trigger": requireMergeGroupTrigger,
|
|
122
205
|
"require-pull-request-target-branches": requirePullRequestTargetBranches,
|
|
123
206
|
"require-run-step-shell": requireRunStepShell,
|
|
207
|
+
"require-sarif-upload-security-events-write": requireSarifUploadSecurityEventsWrite,
|
|
208
|
+
"require-scorecard-results-format-sarif": requireScorecardResultsFormatSarif,
|
|
209
|
+
"require-scorecard-upload-sarif-step": requireScorecardUploadSarifStep,
|
|
210
|
+
"require-secret-scan-contents-read": requireSecretScanContentsRead,
|
|
211
|
+
"require-secret-scan-fetch-depth-zero": requireSecretScanFetchDepthZero,
|
|
212
|
+
"require-secret-scan-schedule": requireSecretScanSchedule,
|
|
124
213
|
"require-template-categories": requireTemplateCategories,
|
|
125
214
|
"require-template-file-patterns": requireTemplateFilePatterns,
|
|
126
215
|
"require-template-icon-file-exists": requireTemplateIconFileExists,
|
|
127
216
|
"require-template-icon-name": requireTemplateIconName,
|
|
128
217
|
"require-template-workflow-name": requireTemplateWorkflowName,
|
|
129
218
|
"require-trigger-types": requireTriggerTypes,
|
|
219
|
+
"require-trufflehog-verified-results-mode": requireTrufflehogVerifiedResultsMode,
|
|
130
220
|
"require-workflow-call-input-type": requireWorkflowCallInputType,
|
|
131
221
|
"require-workflow-call-output-value": requireWorkflowCallOutputValue,
|
|
132
222
|
"require-workflow-concurrency": requireWorkflowConcurrency,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rules-registry.js","sourceRoot":"","sources":["../../src/_internal/rules-registry.ts"],"names":[],"mappings":"AAMA,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,WAAW,MAAM,2BAA2B,CAAC;AACpD,OAAO,gBAAgB,MAAM,iCAAiC,CAAC;AAC/D,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,yBAAyB,MAAM,2CAA2C,CAAC;AAClF,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,qCAAqC,MAAM,0DAA0D,CAAC;AAC7G,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,YAAY,MAAM,4BAA4B,CAAC;AACtD,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,gCAAgC,MAAM,mDAAmD,CAAC;AACjG,OAAO,kCAAkC,MAAM,sDAAsD,CAAC;AACtG,OAAO,mBAAmB,MAAM,qCAAqC,CAAC;AACtE,OAAO,mCAAmC,MAAM,wDAAwD,CAAC;AACzG,OAAO,iBAAiB,MAAM,mCAAmC,CAAC;AAClE,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,gCAAgC,MAAM,qDAAqD,CAAC;AACnG,OAAO,iCAAiC,MAAM,mDAAmD,CAAC;AAClG,OAAO,0CAA0C,MAAM,8DAA8D,CAAC;AACtH,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,2BAA2B,MAAM,6CAA6C,CAAC;AACtF,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,uCAAuC,CAAC;AAC1E,OAAO,wBAAwB,MAAM,0CAA0C,CAAC;AAChF,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,eAAe,MAAM,+BAA+B,CAAC;AAC5D,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,iBAAiB,MAAM,iCAAiC,CAAC;AAChE,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,kBAAkB,MAAM,mCAAmC,CAAC;AACnE,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,4BAA4B,MAAM,8CAA8C,CAAC;AACxF,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mCAAmC,MAAM,oDAAoD,CAAC;AACrG,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,qCAAqC,MAAM,uDAAuD,CAAC;AAC1G,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,kBAAkB,MAAM,kCAAkC,CAAC;AAElE,0EAA0E;AAC1E,MAAM,4BAA4B,
|
|
1
|
+
{"version":3,"file":"rules-registry.js","sourceRoot":"","sources":["../../src/_internal/rules-registry.ts"],"names":[],"mappings":"AAMA,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,WAAW,MAAM,2BAA2B,CAAC;AACpD,OAAO,gBAAgB,MAAM,iCAAiC,CAAC;AAC/D,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,wCAAwC,MAAM,2DAA2D,CAAC;AACjH,OAAO,+CAA+C,MAAM,mEAAmE,CAAC;AAChI,OAAO,yBAAyB,MAAM,2CAA2C,CAAC;AAClF,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,qCAAqC,MAAM,0DAA0D,CAAC;AAC7G,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,YAAY,MAAM,4BAA4B,CAAC;AACtD,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,gCAAgC,MAAM,mDAAmD,CAAC;AACjG,OAAO,kCAAkC,MAAM,mDAAmD,CAAC;AACnG,OAAO,kCAAkC,MAAM,sDAAsD,CAAC;AACtG,OAAO,mBAAmB,MAAM,qCAAqC,CAAC;AACtE,OAAO,mCAAmC,MAAM,wDAAwD,CAAC;AACzG,OAAO,iBAAiB,MAAM,mCAAmC,CAAC;AAClE,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,gCAAgC,MAAM,qDAAqD,CAAC;AACnG,OAAO,iCAAiC,MAAM,mDAAmD,CAAC;AAClG,OAAO,0CAA0C,MAAM,8DAA8D,CAAC;AACtH,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,2BAA2B,MAAM,6CAA6C,CAAC;AACtF,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,uCAAuC,CAAC;AAC1E,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,wBAAwB,MAAM,0CAA0C,CAAC;AAChF,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,eAAe,MAAM,+BAA+B,CAAC;AAC5D,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,iBAAiB,MAAM,iCAAiC,CAAC;AAChE,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,uCAAuC,MAAM,0DAA0D,CAAC;AAC/G,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,qBAAqB,MAAM,qCAAqC,CAAC;AACxE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,sCAAsC,MAAM,uDAAuD,CAAC;AAC3G,OAAO,6CAA6C,MAAM,gEAAgE,CAAC;AAC3H,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0CAA0C,MAAM,6DAA6D,CAAC;AACrH,OAAO,+CAA+C,MAAM,kEAAkE,CAAC;AAC/H,OAAO,oCAAoC,MAAM,sDAAsD,CAAC;AACxG,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,2CAA2C,MAAM,8DAA8D,CAAC;AACvH,OAAO,uBAAuB,MAAM,uCAAuC,CAAC;AAC5E,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,+CAA+C,MAAM,mEAAmE,CAAC;AAChI,OAAO,gCAAgC,MAAM,iDAAiD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,yCAAyC,MAAM,4DAA4D,CAAC;AACnH,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,qCAAqC,MAAM,wDAAwD,CAAC;AAC3G,OAAO,8CAA8C,MAAM,iEAAiE,CAAC;AAC7H,OAAO,yCAAyC,MAAM,4DAA4D,CAAC;AACnH,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,kBAAkB,MAAM,mCAAmC,CAAC;AACnE,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,qCAAqC,MAAM,wDAAwD,CAAC;AAC3G,OAAO,kCAAkC,MAAM,oDAAoD,CAAC;AACpG,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,yBAAyB,MAAM,0CAA0C,CAAC;AACjF,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,oCAAoC,MAAM,sDAAsD,CAAC;AACxG,OAAO,4BAA4B,MAAM,8CAA8C,CAAC;AACxF,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mCAAmC,MAAM,oDAAoD,CAAC;AACrG,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,qCAAqC,MAAM,uDAAuD,CAAC;AAC1G,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,kBAAkB,MAAM,kCAAkC,CAAC;AAElE,0EAA0E;AAC1E,MAAM,4BAA4B,GAmH9B;IACA,oBAAoB,EAAE,gBAAgB;IACtC,eAAe,EAAE,WAAW;IAC5B,qBAAqB,EAAE,gBAAgB;IACvC,wCAAwC,EAAE,iCAAiC;IAC3E,+CAA+C,EAC3C,wCAAwC;IAC5C,uDAAuD,EACnD,+CAA+C;IACnD,+BAA+B,EAAE,yBAAyB;IAC1D,4BAA4B,EAAE,uBAAuB;IACrD,gCAAgC,EAAE,0BAA0B;IAC5D,gCAAgC,EAAE,0BAA0B;IAC5D,iBAAiB,EAAE,aAAa;IAChC,yCAAyC,EACrC,kCAAkC;IACtC,8CAA8C,EAC1C,qCAAqC;IACzC,oBAAoB,EAAE,gBAAgB;IACtC,gCAAgC,EAAE,2BAA2B;IAC7D,gBAAgB,EAAE,YAAY;IAC9B,sCAAsC,EAAE,+BAA+B;IACvE,wCAAwC,EAAE,iCAAiC;IAC3E,uCAAuC,EAAE,gCAAgC;IACzE,uCAAuC,EAAE,kCAAkC;IAC3E,0CAA0C,EACtC,kCAAkC;IACtC,yBAAyB,EAAE,mBAAmB;IAC9C,4CAA4C,EACxC,mCAAmC;IACvC,uBAAuB,EAAE,iBAAiB;IAC1C,gCAAgC,EAAE,0BAA0B;IAC5D,kBAAkB,EAAE,aAAa;IACjC,yCAAyC,EAAE,gCAAgC;IAC3E,uCAAuC,EAAE,iCAAiC;IAC1E,kDAAkD,EAC9C,0CAA0C;IAC9C,kBAAkB,EAAE,aAAa;IACjC,0BAA0B,EAAE,qBAAqB;IACjD,oCAAoC,EAAE,8BAA8B;IACpE,6CAA6C,EACzC,sCAAsC;IAC1C,yCAAyC,EACrC,kCAAkC;IACtC,iCAAiC,EAAE,2BAA2B;IAC9D,2BAA2B,EAAE,sBAAsB;IACnD,2BAA2B,EAAE,qBAAqB;IAClD,6CAA6C,EACzC,sCAAsC;IAC1C,8BAA8B,EAAE,wBAAwB;IACxD,0BAA0B,EAAE,qBAAqB;IACjD,iBAAiB,EAAE,aAAa;IAChC,mBAAmB,EAAE,eAAe;IACpC,kBAAkB,EAAE,cAAc;IAClC,uBAAuB,EAAE,mBAAmB;IAC5C,uBAAuB,EAAE,mBAAmB;IAC5C,wBAAwB,EAAE,mBAAmB;IAC7C,+BAA+B,EAAE,0BAA0B;IAC3D,qBAAqB,EAAE,iBAAiB;IACxC,yBAAyB,EAAE,oBAAoB;IAC/C,sCAAsC,EAAE,gCAAgC;IACxE,6BAA6B,EAAE,wBAAwB;IACvD,+BAA+B,EAAE,0BAA0B;IAC3D,8CAA8C,EAC1C,uCAAuC;IAC3C,qCAAqC,EAAE,+BAA+B;IACtE,yBAAyB,EAAE,qBAAqB;IAChD,sCAAsC,EAAE,gCAAgC;IACxE,6BAA6B,EAAE,wBAAwB;IACvD,8BAA8B,EAAE,0BAA0B;IAC1D,2CAA2C,EACvC,sCAAsC;IAC1C,oDAAoD,EAChD,6CAA6C;IACjD,oCAAoC,EAAE,8BAA8B;IACpE,iDAAiD,EAC7C,0CAA0C;IAC9C,0CAA0C,EACtC,oCAAoC;IACxC,sDAAsD,EAClD,+CAA+C;IACnD,6BAA6B,EAAE,yBAAyB;IACxD,8BAA8B,EAAE,0BAA0B;IAC1D,kDAAkD,EAC9C,2CAA2C;IAC/C,2BAA2B,EAAE,uBAAuB;IACpD,6CAA6C,EACzC,sCAAsC;IAC1C,sCAAsC,EAAE,iCAAiC;IACzE,uDAAuD,EACnD,+CAA+C;IACnD,qCAAqC,EAAE,gCAAgC;IACvE,sCAAsC,EAAE,iCAAiC;IACzE,kCAAkC,EAAE,6BAA6B;IACjE,sCAAsC,EAAE,iCAAiC;IACzE,kCAAkC,EAAE,6BAA6B;IACjE,4BAA4B,EAAE,wBAAwB;IACtD,4BAA4B,EAAE,wBAAwB;IACtD,gDAAgD,EAC5C,yCAAyC;IAC7C,kCAAkC,EAAE,6BAA6B;IACjE,4CAA4C,EACxC,qCAAqC;IACzC,qDAAqD,EACjD,8CAA8C;IAClD,gDAAgD,EAC5C,yCAAyC;IAC7C,qCAAqC,EAAE,+BAA+B;IACtE,kBAAkB,EAAE,cAAc;IAClC,uBAAuB,EAAE,kBAAkB;IAC3C,6BAA6B,EAAE,wBAAwB;IACvD,6BAA6B,EAAE,wBAAwB;IACvD,sCAAsC,EAAE,gCAAgC;IACxE,wBAAwB,EAAE,mBAAmB;IAC7C,4CAA4C,EACxC,qCAAqC;IACzC,wCAAwC,EACpC,kCAAkC;IACtC,qCAAqC,EAAE,+BAA+B;IACtE,mCAAmC,EAAE,6BAA6B;IAClE,sCAAsC,EAAE,+BAA+B;IACvE,8BAA8B,EAAE,yBAAyB;IACzD,6BAA6B,EAAE,yBAAyB;IACxD,gCAAgC,EAAE,2BAA2B;IAC7D,mCAAmC,EAAE,6BAA6B;IAClE,4BAA4B,EAAE,uBAAuB;IACrD,gCAAgC,EAAE,2BAA2B;IAC7D,uBAAuB,EAAE,mBAAmB;IAC5C,0CAA0C,EACtC,oCAAoC;IACxC,kCAAkC,EAAE,4BAA4B;IAChE,oCAAoC,EAAE,8BAA8B;IACpE,8BAA8B,EAAE,0BAA0B;IAC1D,sCAAsC,EAAE,gCAAgC;IACxE,wCAAwC,EACpC,mCAAmC;IACvC,8BAA8B,EAAE,0BAA0B;IAC1D,+BAA+B,EAAE,0BAA0B;IAC3D,gCAAgC,EAAE,2BAA2B;IAC7D,2CAA2C,EACvC,qCAAqC;IACzC,uBAAuB,EAAE,mBAAmB;IAC5C,sBAAsB,EAAE,kBAAkB;CACH,CAAC;AAE5C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAC3B,4BAA4B,CAAC"}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @packageDocumentation
|
|
3
|
+
* Helpers for secret-scanning workflows such as Gitleaks and TruffleHog.
|
|
4
|
+
*/
|
|
5
|
+
import type { AST } from "yaml-eslint-parser";
|
|
6
|
+
import type { WorkflowActionStep } from "./workflow-action-steps.js";
|
|
7
|
+
/** Determine whether a `uses` reference points to the Gitleaks action. */
|
|
8
|
+
export declare const isGitleaksActionReference: (usesReference: string) => boolean;
|
|
9
|
+
/** Determine whether a `uses` reference points to the TruffleHog action. */
|
|
10
|
+
export declare const isTrufflehogActionReference: (usesReference: string) => boolean;
|
|
11
|
+
/**
|
|
12
|
+
* Determine whether a `uses` reference points to a supported secret scanning
|
|
13
|
+
* action.
|
|
14
|
+
*/
|
|
15
|
+
export declare const isSecretScanningActionReference: (usesReference: string) => boolean;
|
|
16
|
+
/** Collect all supported secret scanning action steps in a workflow. */
|
|
17
|
+
export declare const getSecretScanningActionSteps: (root: AST.YAMLMapping) => readonly WorkflowActionStep[];
|
|
18
|
+
/** Collect all Gitleaks action steps in a workflow. */
|
|
19
|
+
export declare const getGitleaksActionSteps: (root: AST.YAMLMapping) => readonly WorkflowActionStep[];
|
|
20
|
+
/** Collect all TruffleHog action steps in a workflow. */
|
|
21
|
+
export declare const getTrufflehogActionSteps: (root: AST.YAMLMapping) => readonly WorkflowActionStep[];
|
|
22
|
+
/** Determine whether a workflow uses any supported secret scanning action. */
|
|
23
|
+
export declare const hasSecretScanningAction: (root: AST.YAMLMapping) => boolean;
|
|
24
|
+
//# sourceMappingURL=secret-scanning-workflow.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"secret-scanning-workflow.d.ts","sourceRoot":"","sources":["../../src/_internal/secret-scanning-workflow.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAIrE,0EAA0E;AAC1E,eAAO,MAAM,yBAAyB,GAAI,eAAe,MAAM,KAAG,OACF,CAAC;AAEjE,4EAA4E;AAC5E,eAAO,MAAM,2BAA2B,GAAI,eAAe,MAAM,KAAG,OACF,CAAC;AAEnE;;;GAGG;AACH,eAAO,MAAM,+BAA+B,GACxC,eAAe,MAAM,KACtB,OAE2C,CAAC;AAE/C,wEAAwE;AACxE,eAAO,MAAM,4BAA4B,GACrC,MAAM,GAAG,CAAC,WAAW,KACtB,SAAS,kBAAkB,EACmC,CAAC;AAElE,uDAAuD;AACvD,eAAO,MAAM,sBAAsB,GAC/B,MAAM,GAAG,CAAC,WAAW,KACtB,SAAS,kBAAkB,EAC6B,CAAC;AAE5D,yDAAyD;AACzD,eAAO,MAAM,wBAAwB,GACjC,MAAM,GAAG,CAAC,WAAW,KACtB,SAAS,kBAAkB,EAC+B,CAAC;AAE9D,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,GAAI,MAAM,GAAG,CAAC,WAAW,KAAG,OACf,CAAC"}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import { getWorkflowActionSteps } from "./workflow-action-steps.js";
|
|
2
|
+
/** Determine whether a `uses` reference points to the Gitleaks action. */
|
|
3
|
+
export const isGitleaksActionReference = (usesReference) => usesReference.trim().startsWith("gitleaks/gitleaks-action@");
|
|
4
|
+
/** Determine whether a `uses` reference points to the TruffleHog action. */
|
|
5
|
+
export const isTrufflehogActionReference = (usesReference) => usesReference.trim().startsWith("trufflesecurity/trufflehog@");
|
|
6
|
+
/**
|
|
7
|
+
* Determine whether a `uses` reference points to a supported secret scanning
|
|
8
|
+
* action.
|
|
9
|
+
*/
|
|
10
|
+
export const isSecretScanningActionReference = (usesReference) => isGitleaksActionReference(usesReference) ||
|
|
11
|
+
isTrufflehogActionReference(usesReference);
|
|
12
|
+
/** Collect all supported secret scanning action steps in a workflow. */
|
|
13
|
+
export const getSecretScanningActionSteps = (root) => getWorkflowActionSteps(root, isSecretScanningActionReference);
|
|
14
|
+
/** Collect all Gitleaks action steps in a workflow. */
|
|
15
|
+
export const getGitleaksActionSteps = (root) => getWorkflowActionSteps(root, isGitleaksActionReference);
|
|
16
|
+
/** Collect all TruffleHog action steps in a workflow. */
|
|
17
|
+
export const getTrufflehogActionSteps = (root) => getWorkflowActionSteps(root, isTrufflehogActionReference);
|
|
18
|
+
/** Determine whether a workflow uses any supported secret scanning action. */
|
|
19
|
+
export const hasSecretScanningAction = (root) => getSecretScanningActionSteps(root).length > 0;
|
|
20
|
+
/* eslint-enable @typescript-eslint/prefer-readonly-parameter-types -- Re-enable readonly-parameter checks outside parser AST helper signatures. */
|
|
21
|
+
//# sourceMappingURL=secret-scanning-workflow.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"secret-scanning-workflow.js","sourceRoot":"","sources":["../../src/_internal/secret-scanning-workflow.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,aAAqB,EAAW,EAAE,CACxE,aAAa,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;AAEjE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,aAAqB,EAAW,EAAE,CAC1E,aAAa,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC;AAEnE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC3C,aAAqB,EACd,EAAE,CACT,yBAAyB,CAAC,aAAa,CAAC;IACxC,2BAA2B,CAAC,aAAa,CAAC,CAAC;AAE/C,wEAAwE;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CACxC,IAAqB,EACQ,EAAE,CAC/B,sBAAsB,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;AAElE,uDAAuD;AACvD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAClC,IAAqB,EACQ,EAAE,CAC/B,sBAAsB,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;AAE5D,yDAAyD;AACzD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACpC,IAAqB,EACQ,EAAE,CAC/B,sBAAsB,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;AAE9D,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAqB,EAAW,EAAE,CACtE,4BAA4B,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAElD,mJAAmJ"}
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @packageDocumentation
|
|
3
|
+
* Shared helpers for workflow steps that use actions or run shell scripts.
|
|
4
|
+
*/
|
|
5
|
+
import type { AST } from "yaml-eslint-parser";
|
|
6
|
+
import { type WorkflowJobEntry } from "./workflow-yaml.js";
|
|
7
|
+
/** Workflow step using an external action via `uses`. */
|
|
8
|
+
export type WorkflowActionStep = {
|
|
9
|
+
readonly job: WorkflowJobEntry;
|
|
10
|
+
readonly stepMapping: AST.YAMLMapping;
|
|
11
|
+
readonly usesPair: AST.YAMLPair;
|
|
12
|
+
readonly usesReference: string;
|
|
13
|
+
};
|
|
14
|
+
/** Workflow step running a shell script via `run`. */
|
|
15
|
+
export type WorkflowRunStep = {
|
|
16
|
+
readonly job: WorkflowJobEntry;
|
|
17
|
+
readonly runPair: AST.YAMLPair;
|
|
18
|
+
readonly runScript: string;
|
|
19
|
+
readonly stepMapping: AST.YAMLMapping;
|
|
20
|
+
};
|
|
21
|
+
/**
|
|
22
|
+
* Collect workflow steps using actions whose `uses` reference matches a
|
|
23
|
+
* predicate.
|
|
24
|
+
*/
|
|
25
|
+
export declare const getWorkflowActionSteps: (root: AST.YAMLMapping, matchesReference: (usesReference: string) => boolean) => readonly WorkflowActionStep[];
|
|
26
|
+
/**
|
|
27
|
+
* Determine whether any workflow step uses an action whose reference matches a
|
|
28
|
+
* predicate.
|
|
29
|
+
*/
|
|
30
|
+
export declare const hasWorkflowActionStep: (root: AST.YAMLMapping, matchesReference: (usesReference: string) => boolean) => boolean;
|
|
31
|
+
/** Collect workflow run steps whose run script matches a predicate. */
|
|
32
|
+
export declare const getWorkflowRunSteps: (root: AST.YAMLMapping, matchesRunScript: (runScript: string) => boolean) => readonly WorkflowRunStep[];
|
|
33
|
+
/** Determine whether any workflow run step matches a script predicate. */
|
|
34
|
+
export declare const hasWorkflowRunStep: (root: AST.YAMLMapping, matchesRunScript: (runScript: string) => boolean) => boolean;
|
|
35
|
+
//# sourceMappingURL=workflow-action-steps.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"workflow-action-steps.d.ts","sourceRoot":"","sources":["../../src/_internal/workflow-action-steps.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAMH,KAAK,gBAAgB,EACxB,MAAM,oBAAoB,CAAC;AAE5B,yDAAyD;AACzD,MAAM,MAAM,kBAAkB,GAAG;IAC7B,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,sDAAsD;AACtD,MAAM,MAAM,eAAe,GAAG;IAC1B,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC;CACzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GAC/B,MAAM,GAAG,CAAC,WAAW,EACrB,kBAAkB,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,KACrD,SAAS,kBAAkB,EAsC7B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAC9B,MAAM,GAAG,CAAC,WAAW,EACrB,kBAAkB,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,KACrD,OAAoE,CAAC;AAExE,uEAAuE;AACvE,eAAO,MAAM,mBAAmB,GAC5B,MAAM,GAAG,CAAC,WAAW,EACrB,kBAAkB,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,KACjD,SAAS,eAAe,EAsC1B,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,GAC3B,MAAM,GAAG,CAAC,WAAW,EACrB,kBAAkB,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,KACjD,OAAiE,CAAC"}
|
|
@@ -0,0 +1,75 @@
|
|
|
1
|
+
import { getMappingPair, getMappingValueAsSequence, getScalarStringValue, getWorkflowJobs, unwrapYamlValue, } from "./workflow-yaml.js";
|
|
2
|
+
/**
|
|
3
|
+
* Collect workflow steps using actions whose `uses` reference matches a
|
|
4
|
+
* predicate.
|
|
5
|
+
*/
|
|
6
|
+
export const getWorkflowActionSteps = (root, matchesReference) => {
|
|
7
|
+
const steps = [];
|
|
8
|
+
for (const job of getWorkflowJobs(root)) {
|
|
9
|
+
const stepsSequence = getMappingValueAsSequence(job.mapping, "steps");
|
|
10
|
+
if (stepsSequence === null) {
|
|
11
|
+
continue;
|
|
12
|
+
}
|
|
13
|
+
for (const entry of stepsSequence.entries) {
|
|
14
|
+
const stepMapping = unwrapYamlValue(entry);
|
|
15
|
+
if (stepMapping?.type !== "YAMLMapping") {
|
|
16
|
+
continue;
|
|
17
|
+
}
|
|
18
|
+
const usesPair = getMappingPair(stepMapping, "uses");
|
|
19
|
+
const usesReference = getScalarStringValue(usesPair?.value ?? null);
|
|
20
|
+
if (usesPair === null || usesReference === null) {
|
|
21
|
+
continue;
|
|
22
|
+
}
|
|
23
|
+
if (!matchesReference(usesReference)) {
|
|
24
|
+
continue;
|
|
25
|
+
}
|
|
26
|
+
steps.push({
|
|
27
|
+
job,
|
|
28
|
+
stepMapping,
|
|
29
|
+
usesPair,
|
|
30
|
+
usesReference,
|
|
31
|
+
});
|
|
32
|
+
}
|
|
33
|
+
}
|
|
34
|
+
return steps;
|
|
35
|
+
};
|
|
36
|
+
/**
|
|
37
|
+
* Determine whether any workflow step uses an action whose reference matches a
|
|
38
|
+
* predicate.
|
|
39
|
+
*/
|
|
40
|
+
export const hasWorkflowActionStep = (root, matchesReference) => getWorkflowActionSteps(root, matchesReference).length > 0;
|
|
41
|
+
/** Collect workflow run steps whose run script matches a predicate. */
|
|
42
|
+
export const getWorkflowRunSteps = (root, matchesRunScript) => {
|
|
43
|
+
const steps = [];
|
|
44
|
+
for (const job of getWorkflowJobs(root)) {
|
|
45
|
+
const stepsSequence = getMappingValueAsSequence(job.mapping, "steps");
|
|
46
|
+
if (stepsSequence === null) {
|
|
47
|
+
continue;
|
|
48
|
+
}
|
|
49
|
+
for (const entry of stepsSequence.entries) {
|
|
50
|
+
const stepMapping = unwrapYamlValue(entry);
|
|
51
|
+
if (stepMapping?.type !== "YAMLMapping") {
|
|
52
|
+
continue;
|
|
53
|
+
}
|
|
54
|
+
const runPair = getMappingPair(stepMapping, "run");
|
|
55
|
+
const runScript = getScalarStringValue(runPair?.value ?? null);
|
|
56
|
+
if (runPair === null || runScript === null) {
|
|
57
|
+
continue;
|
|
58
|
+
}
|
|
59
|
+
if (!matchesRunScript(runScript)) {
|
|
60
|
+
continue;
|
|
61
|
+
}
|
|
62
|
+
steps.push({
|
|
63
|
+
job,
|
|
64
|
+
runPair,
|
|
65
|
+
runScript,
|
|
66
|
+
stepMapping,
|
|
67
|
+
});
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
return steps;
|
|
71
|
+
};
|
|
72
|
+
/** Determine whether any workflow run step matches a script predicate. */
|
|
73
|
+
export const hasWorkflowRunStep = (root, matchesRunScript) => getWorkflowRunSteps(root, matchesRunScript).length > 0;
|
|
74
|
+
/* eslint-enable @typescript-eslint/prefer-readonly-parameter-types -- Re-enable readonly-parameter checks outside parser AST helper signatures. */
|
|
75
|
+
//# sourceMappingURL=workflow-action-steps.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"workflow-action-steps.js","sourceRoot":"","sources":["../../src/_internal/workflow-action-steps.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAElB,MAAM,oBAAoB,CAAC;AAkB5B;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAClC,IAAqB,EACrB,gBAAoD,EACvB,EAAE;IAC/B,MAAM,KAAK,GAAyB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,yBAAyB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEtE,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YACzB,SAAS;QACb,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAE3C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;gBACtC,SAAS;YACb,CAAC;YAED,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;YAEpE,IAAI,QAAQ,KAAK,IAAI,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC9C,SAAS;YACb,CAAC;YAED,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;gBACnC,SAAS;YACb,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACP,GAAG;gBACH,WAAW;gBACX,QAAQ;gBACR,aAAa;aAChB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,IAAqB,EACrB,gBAAoD,EAC7C,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAExE,uEAAuE;AACvE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAC/B,IAAqB,EACrB,gBAAgD,EACtB,EAAE;IAC5B,MAAM,KAAK,GAAsB,EAAE,CAAC;IAEpC,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,yBAAyB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEtE,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YACzB,SAAS;QACb,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAE3C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;gBACtC,SAAS;YACb,CAAC;YAED,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;YAE/D,IAAI,OAAO,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACzC,SAAS;YACb,CAAC;YAED,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,SAAS;YACb,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACP,GAAG;gBACH,OAAO;gBACP,SAAS;gBACT,WAAW;aACd,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAC9B,IAAqB,EACrB,gBAAgD,EACzC,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAErE,mJAAmJ"}
|