eslint-plugin-github-actions-2 1.0.2 → 1.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (504) hide show
  1. package/README.md +149 -101
  2. package/dist/_internal/code-scanning-workflow.d.ts +37 -0
  3. package/dist/_internal/code-scanning-workflow.d.ts.map +1 -0
  4. package/dist/_internal/code-scanning-workflow.js +73 -0
  5. package/dist/_internal/code-scanning-workflow.js.map +1 -0
  6. package/dist/_internal/dependabot-automation-workflow.d.ts +26 -0
  7. package/dist/_internal/dependabot-automation-workflow.d.ts.map +1 -0
  8. package/dist/_internal/dependabot-automation-workflow.js +25 -0
  9. package/dist/_internal/dependabot-automation-workflow.js.map +1 -0
  10. package/dist/_internal/dependabot-yaml.d.ts +63 -0
  11. package/dist/_internal/dependabot-yaml.d.ts.map +1 -0
  12. package/dist/_internal/dependabot-yaml.js +139 -0
  13. package/dist/_internal/dependabot-yaml.js.map +1 -0
  14. package/dist/_internal/dependency-review-workflow.d.ts +20 -0
  15. package/dist/_internal/dependency-review-workflow.d.ts.map +1 -0
  16. package/dist/_internal/dependency-review-workflow.js +9 -0
  17. package/dist/_internal/dependency-review-workflow.js.map +1 -0
  18. package/dist/_internal/github-actions-config-references.d.ts +1 -1
  19. package/dist/_internal/github-actions-config-references.d.ts.map +1 -1
  20. package/dist/_internal/github-actions-config-references.js +19 -2
  21. package/dist/_internal/github-actions-config-references.js.map +1 -1
  22. package/dist/_internal/lint-targets.d.ts +8 -0
  23. package/dist/_internal/lint-targets.d.ts.map +1 -1
  24. package/dist/_internal/lint-targets.js +26 -0
  25. package/dist/_internal/lint-targets.js.map +1 -1
  26. package/dist/_internal/rules-registry.d.ts +90 -0
  27. package/dist/_internal/rules-registry.d.ts.map +1 -1
  28. package/dist/_internal/rules-registry.js +90 -0
  29. package/dist/_internal/rules-registry.js.map +1 -1
  30. package/dist/_internal/secret-scanning-workflow.d.ts +24 -0
  31. package/dist/_internal/secret-scanning-workflow.d.ts.map +1 -0
  32. package/dist/_internal/secret-scanning-workflow.js +21 -0
  33. package/dist/_internal/secret-scanning-workflow.js.map +1 -0
  34. package/dist/_internal/workflow-action-steps.d.ts +35 -0
  35. package/dist/_internal/workflow-action-steps.d.ts.map +1 -0
  36. package/dist/_internal/workflow-action-steps.js +75 -0
  37. package/dist/_internal/workflow-action-steps.js.map +1 -0
  38. package/dist/_internal/workflow-permissions.d.ts +11 -0
  39. package/dist/_internal/workflow-permissions.d.ts.map +1 -0
  40. package/dist/_internal/workflow-permissions.js +50 -0
  41. package/dist/_internal/workflow-permissions.js.map +1 -0
  42. package/dist/_internal/yaml-fixes.d.ts +13 -0
  43. package/dist/_internal/yaml-fixes.d.ts.map +1 -0
  44. package/dist/_internal/yaml-fixes.js +77 -0
  45. package/dist/_internal/yaml-fixes.js.map +1 -0
  46. package/dist/plugin.cjs +3524 -292
  47. package/dist/plugin.cjs.map +4 -4
  48. package/dist/plugin.d.ts.map +1 -1
  49. package/dist/plugin.js +2 -0
  50. package/dist/plugin.js.map +1 -1
  51. package/dist/rules/action-name-casing.d.ts.map +1 -1
  52. package/dist/rules/action-name-casing.js +3 -0
  53. package/dist/rules/action-name-casing.js.map +1 -1
  54. package/dist/rules/job-id-casing.d.ts.map +1 -1
  55. package/dist/rules/job-id-casing.js +3 -0
  56. package/dist/rules/job-id-casing.js.map +1 -1
  57. package/dist/rules/max-jobs-per-action.d.ts.map +1 -1
  58. package/dist/rules/max-jobs-per-action.js +3 -0
  59. package/dist/rules/max-jobs-per-action.js.map +1 -1
  60. package/dist/rules/no-case-insensitive-input-id-collision.d.ts.map +1 -1
  61. package/dist/rules/no-case-insensitive-input-id-collision.js +3 -0
  62. package/dist/rules/no-case-insensitive-input-id-collision.js.map +1 -1
  63. package/dist/rules/no-codeql-autobuild-for-javascript-typescript.d.ts +9 -0
  64. package/dist/rules/no-codeql-autobuild-for-javascript-typescript.d.ts.map +1 -0
  65. package/dist/rules/no-codeql-autobuild-for-javascript-typescript.js +54 -0
  66. package/dist/rules/no-codeql-autobuild-for-javascript-typescript.js.map +1 -0
  67. package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.d.ts +9 -0
  68. package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.d.ts.map +1 -0
  69. package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.js +50 -0
  70. package/dist/rules/no-codeql-javascript-typescript-split-language-matrix.js.map +1 -0
  71. package/dist/rules/no-composite-input-env-access.d.ts.map +1 -1
  72. package/dist/rules/no-composite-input-env-access.js +3 -0
  73. package/dist/rules/no-composite-input-env-access.js.map +1 -1
  74. package/dist/rules/no-deprecated-node-runtime.d.ts.map +1 -1
  75. package/dist/rules/no-deprecated-node-runtime.js +3 -0
  76. package/dist/rules/no-deprecated-node-runtime.js.map +1 -1
  77. package/dist/rules/no-duplicate-composite-step-id.d.ts.map +1 -1
  78. package/dist/rules/no-duplicate-composite-step-id.js +3 -0
  79. package/dist/rules/no-duplicate-composite-step-id.js.map +1 -1
  80. package/dist/rules/no-empty-template-file-pattern.d.ts.map +1 -1
  81. package/dist/rules/no-empty-template-file-pattern.js +6 -0
  82. package/dist/rules/no-empty-template-file-pattern.js.map +1 -1
  83. package/dist/rules/no-external-job.d.ts.map +1 -1
  84. package/dist/rules/no-external-job.js +3 -0
  85. package/dist/rules/no-external-job.js.map +1 -1
  86. package/dist/rules/no-hardcoded-default-branch-in-template.d.ts.map +1 -1
  87. package/dist/rules/no-hardcoded-default-branch-in-template.js +3 -0
  88. package/dist/rules/no-hardcoded-default-branch-in-template.js.map +1 -1
  89. package/dist/rules/no-icon-file-extension-in-template-icon-name.d.ts.map +1 -1
  90. package/dist/rules/no-icon-file-extension-in-template-icon-name.js +13 -3
  91. package/dist/rules/no-icon-file-extension-in-template-icon-name.js.map +1 -1
  92. package/dist/rules/no-inherit-secrets.d.ts.map +1 -1
  93. package/dist/rules/no-inherit-secrets.js +3 -0
  94. package/dist/rules/no-inherit-secrets.js.map +1 -1
  95. package/dist/rules/no-invalid-concurrency-context.d.ts.map +1 -1
  96. package/dist/rules/no-invalid-concurrency-context.js +3 -0
  97. package/dist/rules/no-invalid-concurrency-context.js.map +1 -1
  98. package/dist/rules/no-invalid-key.d.ts.map +1 -1
  99. package/dist/rules/no-invalid-key.js +3 -0
  100. package/dist/rules/no-invalid-key.js.map +1 -1
  101. package/dist/rules/no-invalid-reusable-workflow-job-key.d.ts.map +1 -1
  102. package/dist/rules/no-invalid-reusable-workflow-job-key.js +3 -0
  103. package/dist/rules/no-invalid-reusable-workflow-job-key.js.map +1 -1
  104. package/dist/rules/no-invalid-template-file-pattern-regex.d.ts.map +1 -1
  105. package/dist/rules/no-invalid-template-file-pattern-regex.js +3 -0
  106. package/dist/rules/no-invalid-template-file-pattern-regex.js.map +1 -1
  107. package/dist/rules/no-invalid-workflow-call-output-value.d.ts.map +1 -1
  108. package/dist/rules/no-invalid-workflow-call-output-value.js +3 -0
  109. package/dist/rules/no-invalid-workflow-call-output-value.js.map +1 -1
  110. package/dist/rules/no-overlapping-dependabot-directories.d.ts +9 -0
  111. package/dist/rules/no-overlapping-dependabot-directories.d.ts.map +1 -0
  112. package/dist/rules/no-overlapping-dependabot-directories.js +151 -0
  113. package/dist/rules/no-overlapping-dependabot-directories.js.map +1 -0
  114. package/dist/rules/no-path-separators-in-template-icon-name.d.ts.map +1 -1
  115. package/dist/rules/no-path-separators-in-template-icon-name.js +26 -3
  116. package/dist/rules/no-path-separators-in-template-icon-name.js.map +1 -1
  117. package/dist/rules/no-post-if-without-post.d.ts.map +1 -1
  118. package/dist/rules/no-post-if-without-post.js +6 -0
  119. package/dist/rules/no-post-if-without-post.js.map +1 -1
  120. package/dist/rules/no-pr-head-checkout-in-pull-request-target.d.ts.map +1 -1
  121. package/dist/rules/no-pr-head-checkout-in-pull-request-target.js +3 -0
  122. package/dist/rules/no-pr-head-checkout-in-pull-request-target.js.map +1 -1
  123. package/dist/rules/no-pre-if-without-pre.d.ts.map +1 -1
  124. package/dist/rules/no-pre-if-without-pre.js +6 -0
  125. package/dist/rules/no-pre-if-without-pre.js.map +1 -1
  126. package/dist/rules/no-required-input-with-default.d.ts.map +1 -1
  127. package/dist/rules/no-required-input-with-default.js +23 -0
  128. package/dist/rules/no-required-input-with-default.js.map +1 -1
  129. package/dist/rules/no-secrets-in-if.d.ts.map +1 -1
  130. package/dist/rules/no-secrets-in-if.js +3 -0
  131. package/dist/rules/no-secrets-in-if.js.map +1 -1
  132. package/dist/rules/no-self-hosted-runner-on-fork-pr-events.d.ts.map +1 -1
  133. package/dist/rules/no-self-hosted-runner-on-fork-pr-events.js +3 -0
  134. package/dist/rules/no-self-hosted-runner-on-fork-pr-events.js.map +1 -1
  135. package/dist/rules/no-subdirectory-template-file-pattern.d.ts.map +1 -1
  136. package/dist/rules/no-subdirectory-template-file-pattern.js +3 -0
  137. package/dist/rules/no-subdirectory-template-file-pattern.js.map +1 -1
  138. package/dist/rules/no-template-placeholder-in-non-template-workflow.d.ts.map +1 -1
  139. package/dist/rules/no-template-placeholder-in-non-template-workflow.js +3 -0
  140. package/dist/rules/no-template-placeholder-in-non-template-workflow.js.map +1 -1
  141. package/dist/rules/no-top-level-env.d.ts.map +1 -1
  142. package/dist/rules/no-top-level-env.js +3 -0
  143. package/dist/rules/no-top-level-env.js.map +1 -1
  144. package/dist/rules/no-top-level-permissions.d.ts.map +1 -1
  145. package/dist/rules/no-top-level-permissions.js +3 -0
  146. package/dist/rules/no-top-level-permissions.js.map +1 -1
  147. package/dist/rules/no-universal-template-file-pattern.d.ts.map +1 -1
  148. package/dist/rules/no-universal-template-file-pattern.js +3 -0
  149. package/dist/rules/no-universal-template-file-pattern.js.map +1 -1
  150. package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.d.ts +9 -0
  151. package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.d.ts.map +1 -0
  152. package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.js +58 -0
  153. package/dist/rules/no-unknown-dependabot-multi-ecosystem-group.js.map +1 -0
  154. package/dist/rules/no-unknown-input-reference-in-composite.d.ts.map +1 -1
  155. package/dist/rules/no-unknown-input-reference-in-composite.js +3 -0
  156. package/dist/rules/no-unknown-input-reference-in-composite.js.map +1 -1
  157. package/dist/rules/no-unknown-job-output-reference.d.ts.map +1 -1
  158. package/dist/rules/no-unknown-job-output-reference.js +3 -0
  159. package/dist/rules/no-unknown-job-output-reference.js.map +1 -1
  160. package/dist/rules/no-unknown-step-reference.d.ts.map +1 -1
  161. package/dist/rules/no-unknown-step-reference.js +3 -0
  162. package/dist/rules/no-unknown-step-reference.js.map +1 -1
  163. package/dist/rules/no-untrusted-input-in-run.d.ts.map +1 -1
  164. package/dist/rules/no-untrusted-input-in-run.js +3 -0
  165. package/dist/rules/no-untrusted-input-in-run.js.map +1 -1
  166. package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.d.ts +9 -0
  167. package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.d.ts.map +1 -0
  168. package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.js +51 -0
  169. package/dist/rules/no-unused-dependabot-enable-beta-ecosystems.js.map +1 -0
  170. package/dist/rules/no-unused-input-in-composite.d.ts.map +1 -1
  171. package/dist/rules/no-unused-input-in-composite.js +3 -0
  172. package/dist/rules/no-unused-input-in-composite.js.map +1 -1
  173. package/dist/rules/no-write-all-permissions.d.ts.map +1 -1
  174. package/dist/rules/no-write-all-permissions.js +3 -0
  175. package/dist/rules/no-write-all-permissions.js.map +1 -1
  176. package/dist/rules/pin-action-shas.d.ts.map +1 -1
  177. package/dist/rules/pin-action-shas.js +3 -0
  178. package/dist/rules/pin-action-shas.js.map +1 -1
  179. package/dist/rules/prefer-action-yml.d.ts.map +1 -1
  180. package/dist/rules/prefer-action-yml.js +3 -0
  181. package/dist/rules/prefer-action-yml.js.map +1 -1
  182. package/dist/rules/prefer-fail-fast.d.ts.map +1 -1
  183. package/dist/rules/prefer-fail-fast.js +3 -0
  184. package/dist/rules/prefer-fail-fast.js.map +1 -1
  185. package/dist/rules/prefer-file-extension.d.ts.map +1 -1
  186. package/dist/rules/prefer-file-extension.js +3 -0
  187. package/dist/rules/prefer-file-extension.js.map +1 -1
  188. package/dist/rules/prefer-inputs-context.d.ts.map +1 -1
  189. package/dist/rules/prefer-inputs-context.js +3 -0
  190. package/dist/rules/prefer-inputs-context.js.map +1 -1
  191. package/dist/rules/prefer-step-uses-style.d.ts.map +1 -1
  192. package/dist/rules/prefer-step-uses-style.js +3 -0
  193. package/dist/rules/prefer-step-uses-style.js.map +1 -1
  194. package/dist/rules/prefer-template-yml-extension.d.ts.map +1 -1
  195. package/dist/rules/prefer-template-yml-extension.js +3 -0
  196. package/dist/rules/prefer-template-yml-extension.js.map +1 -1
  197. package/dist/rules/require-action-name.d.ts.map +1 -1
  198. package/dist/rules/require-action-name.js +3 -0
  199. package/dist/rules/require-action-name.js.map +1 -1
  200. package/dist/rules/require-action-run-name.d.ts.map +1 -1
  201. package/dist/rules/require-action-run-name.js +3 -0
  202. package/dist/rules/require-action-run-name.js.map +1 -1
  203. package/dist/rules/require-checkout-before-local-action.d.ts.map +1 -1
  204. package/dist/rules/require-checkout-before-local-action.js +3 -0
  205. package/dist/rules/require-checkout-before-local-action.js.map +1 -1
  206. package/dist/rules/require-codeql-actions-read.d.ts +9 -0
  207. package/dist/rules/require-codeql-actions-read.d.ts.map +1 -0
  208. package/dist/rules/require-codeql-actions-read.js +63 -0
  209. package/dist/rules/require-codeql-actions-read.js.map +1 -0
  210. package/dist/rules/require-codeql-branch-filters.d.ts +12 -0
  211. package/dist/rules/require-codeql-branch-filters.d.ts.map +1 -0
  212. package/dist/rules/require-codeql-branch-filters.js +83 -0
  213. package/dist/rules/require-codeql-branch-filters.js.map +1 -0
  214. package/dist/rules/require-codeql-category-when-language-matrix.d.ts +12 -0
  215. package/dist/rules/require-codeql-category-when-language-matrix.d.ts.map +1 -0
  216. package/dist/rules/require-codeql-category-when-language-matrix.js +68 -0
  217. package/dist/rules/require-codeql-category-when-language-matrix.js.map +1 -0
  218. package/dist/rules/require-codeql-pull-request-trigger.d.ts +9 -0
  219. package/dist/rules/require-codeql-pull-request-trigger.d.ts.map +1 -0
  220. package/dist/rules/require-codeql-pull-request-trigger.js +46 -0
  221. package/dist/rules/require-codeql-pull-request-trigger.js.map +1 -0
  222. package/dist/rules/require-codeql-schedule.d.ts +9 -0
  223. package/dist/rules/require-codeql-schedule.d.ts.map +1 -0
  224. package/dist/rules/require-codeql-schedule.js +46 -0
  225. package/dist/rules/require-codeql-schedule.js.map +1 -0
  226. package/dist/rules/require-codeql-security-events-write.d.ts +9 -0
  227. package/dist/rules/require-codeql-security-events-write.d.ts.map +1 -0
  228. package/dist/rules/require-codeql-security-events-write.js +53 -0
  229. package/dist/rules/require-codeql-security-events-write.js.map +1 -0
  230. package/dist/rules/require-composite-step-name.d.ts.map +1 -1
  231. package/dist/rules/require-composite-step-name.js +3 -0
  232. package/dist/rules/require-composite-step-name.js.map +1 -1
  233. package/dist/rules/require-dependabot-assignees.d.ts +9 -0
  234. package/dist/rules/require-dependabot-assignees.d.ts.map +1 -0
  235. package/dist/rules/require-dependabot-assignees.js +53 -0
  236. package/dist/rules/require-dependabot-assignees.js.map +1 -0
  237. package/dist/rules/require-dependabot-automation-permissions.d.ts +9 -0
  238. package/dist/rules/require-dependabot-automation-permissions.d.ts.map +1 -0
  239. package/dist/rules/require-dependabot-automation-permissions.js +68 -0
  240. package/dist/rules/require-dependabot-automation-permissions.js.map +1 -0
  241. package/dist/rules/require-dependabot-automation-pull-request-trigger.d.ts +12 -0
  242. package/dist/rules/require-dependabot-automation-pull-request-trigger.d.ts.map +1 -0
  243. package/dist/rules/require-dependabot-automation-pull-request-trigger.js +49 -0
  244. package/dist/rules/require-dependabot-automation-pull-request-trigger.js.map +1 -0
  245. package/dist/rules/require-dependabot-bot-actor-guard.d.ts +9 -0
  246. package/dist/rules/require-dependabot-bot-actor-guard.d.ts.map +1 -0
  247. package/dist/rules/require-dependabot-bot-actor-guard.js +64 -0
  248. package/dist/rules/require-dependabot-bot-actor-guard.js.map +1 -0
  249. package/dist/rules/require-dependabot-commit-message-include-scope.d.ts +9 -0
  250. package/dist/rules/require-dependabot-commit-message-include-scope.d.ts.map +1 -0
  251. package/dist/rules/require-dependabot-commit-message-include-scope.js +60 -0
  252. package/dist/rules/require-dependabot-commit-message-include-scope.js.map +1 -0
  253. package/dist/rules/require-dependabot-commit-message-prefix-development.d.ts +9 -0
  254. package/dist/rules/require-dependabot-commit-message-prefix-development.d.ts.map +1 -0
  255. package/dist/rules/require-dependabot-commit-message-prefix-development.js +75 -0
  256. package/dist/rules/require-dependabot-commit-message-prefix-development.js.map +1 -0
  257. package/dist/rules/require-dependabot-commit-message-prefix.d.ts +9 -0
  258. package/dist/rules/require-dependabot-commit-message-prefix.d.ts.map +1 -0
  259. package/dist/rules/require-dependabot-commit-message-prefix.js +60 -0
  260. package/dist/rules/require-dependabot-commit-message-prefix.js.map +1 -0
  261. package/dist/rules/require-dependabot-cooldown.d.ts +9 -0
  262. package/dist/rules/require-dependabot-cooldown.d.ts.map +1 -0
  263. package/dist/rules/require-dependabot-cooldown.js +52 -0
  264. package/dist/rules/require-dependabot-cooldown.js.map +1 -0
  265. package/dist/rules/require-dependabot-directory.d.ts +9 -0
  266. package/dist/rules/require-dependabot-directory.d.ts.map +1 -0
  267. package/dist/rules/require-dependabot-directory.js +68 -0
  268. package/dist/rules/require-dependabot-directory.js.map +1 -0
  269. package/dist/rules/require-dependabot-github-actions-directory-root.d.ts +9 -0
  270. package/dist/rules/require-dependabot-github-actions-directory-root.d.ts.map +1 -0
  271. package/dist/rules/require-dependabot-github-actions-directory-root.js +76 -0
  272. package/dist/rules/require-dependabot-github-actions-directory-root.js.map +1 -0
  273. package/dist/rules/require-dependabot-labels.d.ts +9 -0
  274. package/dist/rules/require-dependabot-labels.d.ts.map +1 -0
  275. package/dist/rules/require-dependabot-labels.js +52 -0
  276. package/dist/rules/require-dependabot-labels.js.map +1 -0
  277. package/dist/rules/require-dependabot-open-pull-requests-limit.d.ts +9 -0
  278. package/dist/rules/require-dependabot-open-pull-requests-limit.d.ts.map +1 -0
  279. package/dist/rules/require-dependabot-open-pull-requests-limit.js +55 -0
  280. package/dist/rules/require-dependabot-open-pull-requests-limit.js.map +1 -0
  281. package/dist/rules/require-dependabot-package-ecosystem.d.ts +9 -0
  282. package/dist/rules/require-dependabot-package-ecosystem.d.ts.map +1 -0
  283. package/dist/rules/require-dependabot-package-ecosystem.js +79 -0
  284. package/dist/rules/require-dependabot-package-ecosystem.js.map +1 -0
  285. package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.d.ts +9 -0
  286. package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.d.ts.map +1 -0
  287. package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.js +58 -0
  288. package/dist/rules/require-dependabot-patterns-for-multi-ecosystem-group.js.map +1 -0
  289. package/dist/rules/require-dependabot-schedule-cronjob.d.ts +9 -0
  290. package/dist/rules/require-dependabot-schedule-cronjob.d.ts.map +1 -0
  291. package/dist/rules/require-dependabot-schedule-cronjob.js +82 -0
  292. package/dist/rules/require-dependabot-schedule-cronjob.js.map +1 -0
  293. package/dist/rules/require-dependabot-schedule-interval.d.ts +9 -0
  294. package/dist/rules/require-dependabot-schedule-interval.d.ts.map +1 -0
  295. package/dist/rules/require-dependabot-schedule-interval.js +73 -0
  296. package/dist/rules/require-dependabot-schedule-interval.js.map +1 -0
  297. package/dist/rules/require-dependabot-schedule-time.d.ts +9 -0
  298. package/dist/rules/require-dependabot-schedule-time.d.ts.map +1 -0
  299. package/dist/rules/require-dependabot-schedule-time.js +68 -0
  300. package/dist/rules/require-dependabot-schedule-time.js.map +1 -0
  301. package/dist/rules/require-dependabot-schedule-timezone.d.ts +9 -0
  302. package/dist/rules/require-dependabot-schedule-timezone.d.ts.map +1 -0
  303. package/dist/rules/require-dependabot-schedule-timezone.js +69 -0
  304. package/dist/rules/require-dependabot-schedule-timezone.js.map +1 -0
  305. package/dist/rules/require-dependabot-target-branch.d.ts +9 -0
  306. package/dist/rules/require-dependabot-target-branch.d.ts.map +1 -0
  307. package/dist/rules/require-dependabot-target-branch.js +53 -0
  308. package/dist/rules/require-dependabot-target-branch.js.map +1 -0
  309. package/dist/rules/require-dependabot-updates.d.ts +9 -0
  310. package/dist/rules/require-dependabot-updates.d.ts.map +1 -0
  311. package/dist/rules/require-dependabot-updates.js +54 -0
  312. package/dist/rules/require-dependabot-updates.js.map +1 -0
  313. package/dist/rules/require-dependabot-version.d.ts +9 -0
  314. package/dist/rules/require-dependabot-version.d.ts.map +1 -0
  315. package/dist/rules/require-dependabot-version.js +62 -0
  316. package/dist/rules/require-dependabot-version.js.map +1 -0
  317. package/dist/rules/require-dependabot-versioning-strategy-for-npm.d.ts +9 -0
  318. package/dist/rules/require-dependabot-versioning-strategy-for-npm.d.ts.map +1 -0
  319. package/dist/rules/require-dependabot-versioning-strategy-for-npm.js +58 -0
  320. package/dist/rules/require-dependabot-versioning-strategy-for-npm.js.map +1 -0
  321. package/dist/rules/require-dependency-review-action.d.ts +9 -0
  322. package/dist/rules/require-dependency-review-action.d.ts.map +1 -0
  323. package/dist/rules/require-dependency-review-action.js +51 -0
  324. package/dist/rules/require-dependency-review-action.js.map +1 -0
  325. package/dist/rules/require-dependency-review-fail-on-severity.d.ts +9 -0
  326. package/dist/rules/require-dependency-review-fail-on-severity.d.ts.map +1 -0
  327. package/dist/rules/require-dependency-review-fail-on-severity.js +62 -0
  328. package/dist/rules/require-dependency-review-fail-on-severity.js.map +1 -0
  329. package/dist/rules/require-dependency-review-permissions-contents-read.d.ts +9 -0
  330. package/dist/rules/require-dependency-review-permissions-contents-read.d.ts.map +1 -0
  331. package/dist/rules/require-dependency-review-permissions-contents-read.js +55 -0
  332. package/dist/rules/require-dependency-review-permissions-contents-read.js.map +1 -0
  333. package/dist/rules/require-dependency-review-pull-request-trigger.d.ts +9 -0
  334. package/dist/rules/require-dependency-review-pull-request-trigger.d.ts.map +1 -0
  335. package/dist/rules/require-dependency-review-pull-request-trigger.js +47 -0
  336. package/dist/rules/require-dependency-review-pull-request-trigger.js.map +1 -0
  337. package/dist/rules/require-fetch-metadata-github-token.d.ts +9 -0
  338. package/dist/rules/require-fetch-metadata-github-token.d.ts.map +1 -0
  339. package/dist/rules/require-fetch-metadata-github-token.js +57 -0
  340. package/dist/rules/require-fetch-metadata-github-token.js.map +1 -0
  341. package/dist/rules/require-job-name.d.ts.map +1 -1
  342. package/dist/rules/require-job-name.js +35 -0
  343. package/dist/rules/require-job-name.js.map +1 -1
  344. package/dist/rules/require-job-step-name.d.ts.map +1 -1
  345. package/dist/rules/require-job-step-name.js +76 -0
  346. package/dist/rules/require-job-step-name.js.map +1 -1
  347. package/dist/rules/require-job-timeout-minutes.d.ts.map +1 -1
  348. package/dist/rules/require-job-timeout-minutes.js +3 -0
  349. package/dist/rules/require-job-timeout-minutes.js.map +1 -1
  350. package/dist/rules/require-merge-group-trigger.d.ts.map +1 -1
  351. package/dist/rules/require-merge-group-trigger.js +3 -0
  352. package/dist/rules/require-merge-group-trigger.js.map +1 -1
  353. package/dist/rules/require-pull-request-target-branches.d.ts.map +1 -1
  354. package/dist/rules/require-pull-request-target-branches.js +3 -0
  355. package/dist/rules/require-pull-request-target-branches.js.map +1 -1
  356. package/dist/rules/require-run-step-shell.d.ts.map +1 -1
  357. package/dist/rules/require-run-step-shell.js +3 -0
  358. package/dist/rules/require-run-step-shell.js.map +1 -1
  359. package/dist/rules/require-sarif-upload-security-events-write.d.ts +9 -0
  360. package/dist/rules/require-sarif-upload-security-events-write.d.ts.map +1 -0
  361. package/dist/rules/require-sarif-upload-security-events-write.js +51 -0
  362. package/dist/rules/require-sarif-upload-security-events-write.js.map +1 -0
  363. package/dist/rules/require-scorecard-results-format-sarif.d.ts +9 -0
  364. package/dist/rules/require-scorecard-results-format-sarif.d.ts.map +1 -0
  365. package/dist/rules/require-scorecard-results-format-sarif.js +57 -0
  366. package/dist/rules/require-scorecard-results-format-sarif.js.map +1 -0
  367. package/dist/rules/require-scorecard-upload-sarif-step.d.ts +9 -0
  368. package/dist/rules/require-scorecard-upload-sarif-step.d.ts.map +1 -0
  369. package/dist/rules/require-scorecard-upload-sarif-step.js +46 -0
  370. package/dist/rules/require-scorecard-upload-sarif-step.js.map +1 -0
  371. package/dist/rules/require-secret-scan-contents-read.d.ts +12 -0
  372. package/dist/rules/require-secret-scan-contents-read.d.ts.map +1 -0
  373. package/dist/rules/require-secret-scan-contents-read.js +53 -0
  374. package/dist/rules/require-secret-scan-contents-read.js.map +1 -0
  375. package/dist/rules/require-secret-scan-fetch-depth-zero.d.ts +9 -0
  376. package/dist/rules/require-secret-scan-fetch-depth-zero.d.ts.map +1 -0
  377. package/dist/rules/require-secret-scan-fetch-depth-zero.js +77 -0
  378. package/dist/rules/require-secret-scan-fetch-depth-zero.js.map +1 -0
  379. package/dist/rules/require-secret-scan-schedule.d.ts +9 -0
  380. package/dist/rules/require-secret-scan-schedule.d.ts.map +1 -0
  381. package/dist/rules/require-secret-scan-schedule.js +46 -0
  382. package/dist/rules/require-secret-scan-schedule.js.map +1 -0
  383. package/dist/rules/require-template-categories.d.ts.map +1 -1
  384. package/dist/rules/require-template-categories.js +3 -0
  385. package/dist/rules/require-template-categories.js.map +1 -1
  386. package/dist/rules/require-template-file-patterns.d.ts.map +1 -1
  387. package/dist/rules/require-template-file-patterns.js +3 -0
  388. package/dist/rules/require-template-file-patterns.js.map +1 -1
  389. package/dist/rules/require-template-icon-file-exists.d.ts.map +1 -1
  390. package/dist/rules/require-template-icon-file-exists.js +3 -0
  391. package/dist/rules/require-template-icon-file-exists.js.map +1 -1
  392. package/dist/rules/require-template-icon-name.d.ts.map +1 -1
  393. package/dist/rules/require-template-icon-name.js +3 -0
  394. package/dist/rules/require-template-icon-name.js.map +1 -1
  395. package/dist/rules/require-template-workflow-name.d.ts.map +1 -1
  396. package/dist/rules/require-template-workflow-name.js +3 -0
  397. package/dist/rules/require-template-workflow-name.js.map +1 -1
  398. package/dist/rules/require-trigger-types.d.ts.map +1 -1
  399. package/dist/rules/require-trigger-types.js +3 -0
  400. package/dist/rules/require-trigger-types.js.map +1 -1
  401. package/dist/rules/require-trufflehog-verified-results-mode.d.ts +9 -0
  402. package/dist/rules/require-trufflehog-verified-results-mode.d.ts.map +1 -0
  403. package/dist/rules/require-trufflehog-verified-results-mode.js +59 -0
  404. package/dist/rules/require-trufflehog-verified-results-mode.js.map +1 -0
  405. package/dist/rules/require-workflow-call-input-type.d.ts.map +1 -1
  406. package/dist/rules/require-workflow-call-input-type.js +3 -0
  407. package/dist/rules/require-workflow-call-input-type.js.map +1 -1
  408. package/dist/rules/require-workflow-call-output-value.d.ts.map +1 -1
  409. package/dist/rules/require-workflow-call-output-value.js +3 -0
  410. package/dist/rules/require-workflow-call-output-value.js.map +1 -1
  411. package/dist/rules/require-workflow-concurrency.d.ts.map +1 -1
  412. package/dist/rules/require-workflow-concurrency.js +3 -0
  413. package/dist/rules/require-workflow-concurrency.js.map +1 -1
  414. package/dist/rules/require-workflow-dispatch-input-type.d.ts.map +1 -1
  415. package/dist/rules/require-workflow-dispatch-input-type.js +3 -0
  416. package/dist/rules/require-workflow-dispatch-input-type.js.map +1 -1
  417. package/dist/rules/require-workflow-interface-description.d.ts.map +1 -1
  418. package/dist/rules/require-workflow-interface-description.js +3 -0
  419. package/dist/rules/require-workflow-interface-description.js.map +1 -1
  420. package/dist/rules/require-workflow-permissions.d.ts.map +1 -1
  421. package/dist/rules/require-workflow-permissions.js +3 -0
  422. package/dist/rules/require-workflow-permissions.js.map +1 -1
  423. package/dist/rules/require-workflow-run-branches.d.ts.map +1 -1
  424. package/dist/rules/require-workflow-run-branches.js +3 -0
  425. package/dist/rules/require-workflow-run-branches.js.map +1 -1
  426. package/dist/rules/require-workflow-template-pair.d.ts.map +1 -1
  427. package/dist/rules/require-workflow-template-pair.js +3 -0
  428. package/dist/rules/require-workflow-template-pair.js.map +1 -1
  429. package/dist/rules/require-workflow-template-properties-pair.d.ts.map +1 -1
  430. package/dist/rules/require-workflow-template-properties-pair.js +3 -0
  431. package/dist/rules/require-workflow-template-properties-pair.js.map +1 -1
  432. package/dist/rules/valid-timeout-minutes.d.ts.map +1 -1
  433. package/dist/rules/valid-timeout-minutes.js +3 -0
  434. package/dist/rules/valid-timeout-minutes.js.map +1 -1
  435. package/dist/rules/valid-trigger-events.d.ts.map +1 -1
  436. package/dist/rules/valid-trigger-events.js +3 -0
  437. package/dist/rules/valid-trigger-events.js.map +1 -1
  438. package/docs/rules/action-name-casing.md +6 -2
  439. package/docs/rules/no-codeql-autobuild-for-javascript-typescript.md +55 -0
  440. package/docs/rules/no-codeql-javascript-typescript-split-language-matrix.md +51 -0
  441. package/docs/rules/no-empty-template-file-pattern.md +5 -1
  442. package/docs/rules/no-icon-file-extension-in-template-icon-name.md +5 -1
  443. package/docs/rules/no-overlapping-dependabot-directories.md +87 -0
  444. package/docs/rules/no-path-separators-in-template-icon-name.md +5 -1
  445. package/docs/rules/no-post-if-without-post.md +5 -1
  446. package/docs/rules/no-pre-if-without-pre.md +5 -1
  447. package/docs/rules/no-required-input-with-default.md +10 -1
  448. package/docs/rules/no-unknown-dependabot-multi-ecosystem-group.md +62 -0
  449. package/docs/rules/no-unused-dependabot-enable-beta-ecosystems.md +63 -0
  450. package/docs/rules/overview.md +47 -1
  451. package/docs/rules/prefer-inputs-context.md +6 -2
  452. package/docs/rules/presets/action-metadata.md +22 -11
  453. package/docs/rules/presets/all.md +125 -69
  454. package/docs/rules/presets/code-scanning.md +33 -0
  455. package/docs/rules/presets/dependabot.md +40 -0
  456. package/docs/rules/presets/index.md +139 -81
  457. package/docs/rules/presets/recommended.md +30 -19
  458. package/docs/rules/presets/security.md +35 -9
  459. package/docs/rules/presets/strict.md +52 -41
  460. package/docs/rules/presets/workflow-template-properties.md +22 -11
  461. package/docs/rules/presets/workflow-templates.md +26 -15
  462. package/docs/rules/require-codeql-actions-read.md +50 -0
  463. package/docs/rules/require-codeql-branch-filters.md +53 -0
  464. package/docs/rules/require-codeql-category-when-language-matrix.md +49 -0
  465. package/docs/rules/require-codeql-pull-request-trigger.md +53 -0
  466. package/docs/rules/require-codeql-schedule.md +57 -0
  467. package/docs/rules/require-codeql-security-events-write.md +50 -0
  468. package/docs/rules/require-dependabot-assignees.md +64 -0
  469. package/docs/rules/require-dependabot-automation-permissions.md +53 -0
  470. package/docs/rules/require-dependabot-automation-pull-request-trigger.md +49 -0
  471. package/docs/rules/require-dependabot-bot-actor-guard.md +52 -0
  472. package/docs/rules/require-dependabot-commit-message-include-scope.md +58 -0
  473. package/docs/rules/require-dependabot-commit-message-prefix-development.md +60 -0
  474. package/docs/rules/require-dependabot-commit-message-prefix.md +64 -0
  475. package/docs/rules/require-dependabot-cooldown.md +59 -0
  476. package/docs/rules/require-dependabot-directory.md +79 -0
  477. package/docs/rules/require-dependabot-github-actions-directory-root.md +62 -0
  478. package/docs/rules/require-dependabot-labels.md +65 -0
  479. package/docs/rules/require-dependabot-open-pull-requests-limit.md +58 -0
  480. package/docs/rules/require-dependabot-package-ecosystem.md +57 -0
  481. package/docs/rules/require-dependabot-patterns-for-multi-ecosystem-group.md +67 -0
  482. package/docs/rules/require-dependabot-schedule-cronjob.md +74 -0
  483. package/docs/rules/require-dependabot-schedule-interval.md +66 -0
  484. package/docs/rules/require-dependabot-schedule-time.md +60 -0
  485. package/docs/rules/require-dependabot-schedule-timezone.md +61 -0
  486. package/docs/rules/require-dependabot-target-branch.md +63 -0
  487. package/docs/rules/require-dependabot-updates.md +58 -0
  488. package/docs/rules/require-dependabot-version.md +70 -0
  489. package/docs/rules/require-dependabot-versioning-strategy-for-npm.md +58 -0
  490. package/docs/rules/require-dependency-review-action.md +60 -0
  491. package/docs/rules/require-dependency-review-fail-on-severity.md +57 -0
  492. package/docs/rules/require-dependency-review-permissions-contents-read.md +62 -0
  493. package/docs/rules/require-dependency-review-pull-request-trigger.md +57 -0
  494. package/docs/rules/require-fetch-metadata-github-token.md +49 -0
  495. package/docs/rules/require-job-name.md +6 -2
  496. package/docs/rules/require-job-step-name.md +11 -2
  497. package/docs/rules/require-sarif-upload-security-events-write.md +50 -0
  498. package/docs/rules/require-scorecard-results-format-sarif.md +49 -0
  499. package/docs/rules/require-scorecard-upload-sarif-step.md +55 -0
  500. package/docs/rules/require-secret-scan-contents-read.md +48 -0
  501. package/docs/rules/require-secret-scan-fetch-depth-zero.md +50 -0
  502. package/docs/rules/require-secret-scan-schedule.md +50 -0
  503. package/docs/rules/require-trufflehog-verified-results-mode.md +49 -0
  504. package/package.json +50 -57
@@ -2,6 +2,8 @@ import actionNameCasing from "../rules/action-name-casing.js";
2
2
  import jobIdCasing from "../rules/job-id-casing.js";
3
3
  import maxJobsPerAction from "../rules/max-jobs-per-action.js";
4
4
  import noCaseInsensitiveInputIdCollision from "../rules/no-case-insensitive-input-id-collision.js";
5
+ import noCodeqlAutobuildForJavaScriptTypeScript from "../rules/no-codeql-autobuild-for-javascript-typescript.js";
6
+ import noCodeqlJavascriptTypeScriptSplitLanguageMatrix from "../rules/no-codeql-javascript-typescript-split-language-matrix.js";
5
7
  import noCompositeInputEnvAccess from "../rules/no-composite-input-env-access.js";
6
8
  import noDeprecatedNodeRuntime from "../rules/no-deprecated-node-runtime.js";
7
9
  import noDuplicateCompositeStepId from "../rules/no-duplicate-composite-step-id.js";
@@ -15,6 +17,7 @@ import noInvalidKey from "../rules/no-invalid-key.js";
15
17
  import noInvalidReusableWorkflowJobKey from "../rules/no-invalid-reusable-workflow-job-key.js";
16
18
  import noInvalidTemplateFilePatternRegex from "../rules/no-invalid-template-file-pattern-regex.js";
17
19
  import noInvalidWorkflowCallOutputValue from "../rules/no-invalid-workflow-call-output-value.js";
20
+ import noOverlappingDependabotDirectories from "../rules/no-overlapping-dependabot-directories.js";
18
21
  import noPathSeparatorsInTemplateIconName from "../rules/no-path-separators-in-template-icon-name.js";
19
22
  import noPostIfWithoutPost from "../rules/no-post-if-without-post.js";
20
23
  import noPrHeadCheckoutInPullRequestTarget from "../rules/no-pr-head-checkout-in-pull-request-target.js";
@@ -27,10 +30,12 @@ import noTemplatePlaceholderInNonTemplateWorkflow from "../rules/no-template-pla
27
30
  import noTopLevelEnv from "../rules/no-top-level-env.js";
28
31
  import noTopLevelPermissions from "../rules/no-top-level-permissions.js";
29
32
  import noUniversalTemplateFilePattern from "../rules/no-universal-template-file-pattern.js";
33
+ import noUnknownDependabotMultiEcosystemGroup from "../rules/no-unknown-dependabot-multi-ecosystem-group.js";
30
34
  import noUnknownInputReferenceInComposite from "../rules/no-unknown-input-reference-in-composite.js";
31
35
  import noUnknownJobOutputReference from "../rules/no-unknown-job-output-reference.js";
32
36
  import noUnknownStepReference from "../rules/no-unknown-step-reference.js";
33
37
  import noUntrustedInputInRun from "../rules/no-untrusted-input-in-run.js";
38
+ import noUnusedDependabotEnableBetaEcosystems from "../rules/no-unused-dependabot-enable-beta-ecosystems.js";
34
39
  import noUnusedInputInComposite from "../rules/no-unused-input-in-composite.js";
35
40
  import noWriteAllPermissions from "../rules/no-write-all-permissions.js";
36
41
  import pinActionShas from "../rules/pin-action-shas.js";
@@ -43,19 +48,59 @@ import preferTemplateYmlExtension from "../rules/prefer-template-yml-extension.j
43
48
  import requireActionName from "../rules/require-action-name.js";
44
49
  import requireActionRunName from "../rules/require-action-run-name.js";
45
50
  import requireCheckoutBeforeLocalAction from "../rules/require-checkout-before-local-action.js";
51
+ import requireCodeqlActionsRead from "../rules/require-codeql-actions-read.js";
52
+ import requireCodeqlBranchFilters from "../rules/require-codeql-branch-filters.js";
53
+ import requireCodeqlCategoryWhenLanguageMatrix from "../rules/require-codeql-category-when-language-matrix.js";
54
+ import requireCodeqlPullRequestTrigger from "../rules/require-codeql-pull-request-trigger.js";
55
+ import requireCodeqlSchedule from "../rules/require-codeql-schedule.js";
56
+ import requireCodeqlSecurityEventsWrite from "../rules/require-codeql-security-events-write.js";
46
57
  import requireCompositeStepName from "../rules/require-composite-step-name.js";
58
+ import requireDependabotAssignees from "../rules/require-dependabot-assignees.js";
59
+ import requireDependabotAutomationPermissions from "../rules/require-dependabot-automation-permissions.js";
60
+ import requireDependabotAutomationPullRequestTrigger from "../rules/require-dependabot-automation-pull-request-trigger.js";
61
+ import requireDependabotBotActorGuard from "../rules/require-dependabot-bot-actor-guard.js";
62
+ import requireDependabotCommitMessageIncludeScope from "../rules/require-dependabot-commit-message-include-scope.js";
63
+ import requireDependabotCommitMessagePrefixDevelopment from "../rules/require-dependabot-commit-message-prefix-development.js";
64
+ import requireDependabotCommitMessagePrefix from "../rules/require-dependabot-commit-message-prefix.js";
65
+ import requireDependabotCooldown from "../rules/require-dependabot-cooldown.js";
66
+ import requireDependabotDirectory from "../rules/require-dependabot-directory.js";
67
+ import requireDependabotGithubActionsDirectoryRoot from "../rules/require-dependabot-github-actions-directory-root.js";
68
+ import requireDependabotLabels from "../rules/require-dependabot-labels.js";
69
+ import requireDependabotOpenPullRequestsLimit from "../rules/require-dependabot-open-pull-requests-limit.js";
70
+ import requireDependabotPackageEcosystem from "../rules/require-dependabot-package-ecosystem.js";
71
+ import requireDependabotPatternsForMultiEcosystemGroup from "../rules/require-dependabot-patterns-for-multi-ecosystem-group.js";
72
+ import requireDependabotScheduleCronjob from "../rules/require-dependabot-schedule-cronjob.js";
73
+ import requireDependabotScheduleInterval from "../rules/require-dependabot-schedule-interval.js";
74
+ import requireDependabotScheduleTime from "../rules/require-dependabot-schedule-time.js";
75
+ import requireDependabotScheduleTimezone from "../rules/require-dependabot-schedule-timezone.js";
76
+ import requireDependabotTargetBranch from "../rules/require-dependabot-target-branch.js";
77
+ import requireDependabotUpdates from "../rules/require-dependabot-updates.js";
78
+ import requireDependabotVersion from "../rules/require-dependabot-version.js";
79
+ import requireDependabotVersioningStrategyForNpm from "../rules/require-dependabot-versioning-strategy-for-npm.js";
80
+ import requireDependencyReviewAction from "../rules/require-dependency-review-action.js";
81
+ import requireDependencyReviewFailOnSeverity from "../rules/require-dependency-review-fail-on-severity.js";
82
+ import requireDependencyReviewPermissionsContentsRead from "../rules/require-dependency-review-permissions-contents-read.js";
83
+ import requireDependencyReviewPullRequestTrigger from "../rules/require-dependency-review-pull-request-trigger.js";
84
+ import requireFetchMetadataGithubToken from "../rules/require-fetch-metadata-github-token.js";
47
85
  import requireJobName from "../rules/require-job-name.js";
48
86
  import requireJobStepName from "../rules/require-job-step-name.js";
49
87
  import requireJobTimeoutMinutes from "../rules/require-job-timeout-minutes.js";
50
88
  import requireMergeGroupTrigger from "../rules/require-merge-group-trigger.js";
51
89
  import requirePullRequestTargetBranches from "../rules/require-pull-request-target-branches.js";
52
90
  import requireRunStepShell from "../rules/require-run-step-shell.js";
91
+ import requireSarifUploadSecurityEventsWrite from "../rules/require-sarif-upload-security-events-write.js";
92
+ import requireScorecardResultsFormatSarif from "../rules/require-scorecard-results-format-sarif.js";
93
+ import requireScorecardUploadSarifStep from "../rules/require-scorecard-upload-sarif-step.js";
94
+ import requireSecretScanContentsRead from "../rules/require-secret-scan-contents-read.js";
95
+ import requireSecretScanFetchDepthZero from "../rules/require-secret-scan-fetch-depth-zero.js";
96
+ import requireSecretScanSchedule from "../rules/require-secret-scan-schedule.js";
53
97
  import requireTemplateCategories from "../rules/require-template-categories.js";
54
98
  import requireTemplateFilePatterns from "../rules/require-template-file-patterns.js";
55
99
  import requireTemplateIconFileExists from "../rules/require-template-icon-file-exists.js";
56
100
  import requireTemplateIconName from "../rules/require-template-icon-name.js";
57
101
  import requireTemplateWorkflowName from "../rules/require-template-workflow-name.js";
58
102
  import requireTriggerTypes from "../rules/require-trigger-types.js";
103
+ import requireTrufflehogVerifiedResultsMode from "../rules/require-trufflehog-verified-results-mode.js";
59
104
  import requireWorkflowCallInputType from "../rules/require-workflow-call-input-type.js";
60
105
  import requireWorkflowCallOutputValue from "../rules/require-workflow-call-output-value.js";
61
106
  import requireWorkflowConcurrency from "../rules/require-workflow-concurrency.js";
@@ -73,6 +118,8 @@ declare const githubActionsRulesDefinition: {
73
118
  readonly "job-id-casing": typeof jobIdCasing;
74
119
  readonly "max-jobs-per-action": typeof maxJobsPerAction;
75
120
  readonly "no-case-insensitive-input-id-collision": typeof noCaseInsensitiveInputIdCollision;
121
+ readonly "no-codeql-autobuild-for-javascript-typescript": typeof noCodeqlAutobuildForJavaScriptTypeScript;
122
+ readonly "no-codeql-javascript-typescript-split-language-matrix": typeof noCodeqlJavascriptTypeScriptSplitLanguageMatrix;
76
123
  readonly "no-composite-input-env-access": typeof noCompositeInputEnvAccess;
77
124
  readonly "no-deprecated-node-runtime": typeof noDeprecatedNodeRuntime;
78
125
  readonly "no-duplicate-composite-step-id": typeof noDuplicateCompositeStepId;
@@ -86,6 +133,7 @@ declare const githubActionsRulesDefinition: {
86
133
  readonly "no-invalid-reusable-workflow-job-key": typeof noInvalidReusableWorkflowJobKey;
87
134
  readonly "no-invalid-template-file-pattern-regex": typeof noInvalidTemplateFilePatternRegex;
88
135
  readonly "no-invalid-workflow-call-output-value": typeof noInvalidWorkflowCallOutputValue;
136
+ readonly "no-overlapping-dependabot-directories": typeof noOverlappingDependabotDirectories;
89
137
  readonly "no-path-separators-in-template-icon-name": typeof noPathSeparatorsInTemplateIconName;
90
138
  readonly "no-post-if-without-post": typeof noPostIfWithoutPost;
91
139
  readonly "no-pr-head-checkout-in-pull-request-target": typeof noPrHeadCheckoutInPullRequestTarget;
@@ -98,10 +146,12 @@ declare const githubActionsRulesDefinition: {
98
146
  readonly "no-top-level-env": typeof noTopLevelEnv;
99
147
  readonly "no-top-level-permissions": typeof noTopLevelPermissions;
100
148
  readonly "no-universal-template-file-pattern": typeof noUniversalTemplateFilePattern;
149
+ readonly "no-unknown-dependabot-multi-ecosystem-group": typeof noUnknownDependabotMultiEcosystemGroup;
101
150
  readonly "no-unknown-input-reference-in-composite": typeof noUnknownInputReferenceInComposite;
102
151
  readonly "no-unknown-job-output-reference": typeof noUnknownJobOutputReference;
103
152
  readonly "no-unknown-step-reference": typeof noUnknownStepReference;
104
153
  readonly "no-untrusted-input-in-run": typeof noUntrustedInputInRun;
154
+ readonly "no-unused-dependabot-enable-beta-ecosystems": typeof noUnusedDependabotEnableBetaEcosystems;
105
155
  readonly "no-unused-input-in-composite": typeof noUnusedInputInComposite;
106
156
  readonly "no-write-all-permissions": typeof noWriteAllPermissions;
107
157
  readonly "pin-action-shas": typeof pinActionShas;
@@ -114,19 +164,59 @@ declare const githubActionsRulesDefinition: {
114
164
  readonly "require-action-name": typeof requireActionName;
115
165
  readonly "require-action-run-name": typeof requireActionRunName;
116
166
  readonly "require-checkout-before-local-action": typeof requireCheckoutBeforeLocalAction;
167
+ readonly "require-codeql-actions-read": typeof requireCodeqlActionsRead;
168
+ readonly "require-codeql-branch-filters": typeof requireCodeqlBranchFilters;
169
+ readonly "require-codeql-category-when-language-matrix": typeof requireCodeqlCategoryWhenLanguageMatrix;
170
+ readonly "require-codeql-pull-request-trigger": typeof requireCodeqlPullRequestTrigger;
171
+ readonly "require-codeql-schedule": typeof requireCodeqlSchedule;
172
+ readonly "require-codeql-security-events-write": typeof requireCodeqlSecurityEventsWrite;
117
173
  readonly "require-composite-step-name": typeof requireCompositeStepName;
174
+ readonly "require-dependabot-assignees": typeof requireDependabotAssignees;
175
+ readonly "require-dependabot-automation-permissions": typeof requireDependabotAutomationPermissions;
176
+ readonly "require-dependabot-automation-pull-request-trigger": typeof requireDependabotAutomationPullRequestTrigger;
177
+ readonly "require-dependabot-bot-actor-guard": typeof requireDependabotBotActorGuard;
178
+ readonly "require-dependabot-commit-message-include-scope": typeof requireDependabotCommitMessageIncludeScope;
179
+ readonly "require-dependabot-commit-message-prefix": typeof requireDependabotCommitMessagePrefix;
180
+ readonly "require-dependabot-commit-message-prefix-development": typeof requireDependabotCommitMessagePrefixDevelopment;
181
+ readonly "require-dependabot-cooldown": typeof requireDependabotCooldown;
182
+ readonly "require-dependabot-directory": typeof requireDependabotDirectory;
183
+ readonly "require-dependabot-github-actions-directory-root": typeof requireDependabotGithubActionsDirectoryRoot;
184
+ readonly "require-dependabot-labels": typeof requireDependabotLabels;
185
+ readonly "require-dependabot-open-pull-requests-limit": typeof requireDependabotOpenPullRequestsLimit;
186
+ readonly "require-dependabot-package-ecosystem": typeof requireDependabotPackageEcosystem;
187
+ readonly "require-dependabot-patterns-for-multi-ecosystem-group": typeof requireDependabotPatternsForMultiEcosystemGroup;
188
+ readonly "require-dependabot-schedule-cronjob": typeof requireDependabotScheduleCronjob;
189
+ readonly "require-dependabot-schedule-interval": typeof requireDependabotScheduleInterval;
190
+ readonly "require-dependabot-schedule-time": typeof requireDependabotScheduleTime;
191
+ readonly "require-dependabot-schedule-timezone": typeof requireDependabotScheduleTimezone;
192
+ readonly "require-dependabot-target-branch": typeof requireDependabotTargetBranch;
193
+ readonly "require-dependabot-updates": typeof requireDependabotUpdates;
194
+ readonly "require-dependabot-version": typeof requireDependabotVersion;
195
+ readonly "require-dependabot-versioning-strategy-for-npm": typeof requireDependabotVersioningStrategyForNpm;
196
+ readonly "require-dependency-review-action": typeof requireDependencyReviewAction;
197
+ readonly "require-dependency-review-fail-on-severity": typeof requireDependencyReviewFailOnSeverity;
198
+ readonly "require-dependency-review-permissions-contents-read": typeof requireDependencyReviewPermissionsContentsRead;
199
+ readonly "require-dependency-review-pull-request-trigger": typeof requireDependencyReviewPullRequestTrigger;
200
+ readonly "require-fetch-metadata-github-token": typeof requireFetchMetadataGithubToken;
118
201
  readonly "require-job-name": typeof requireJobName;
119
202
  readonly "require-job-step-name": typeof requireJobStepName;
120
203
  readonly "require-job-timeout-minutes": typeof requireJobTimeoutMinutes;
121
204
  readonly "require-merge-group-trigger": typeof requireMergeGroupTrigger;
122
205
  readonly "require-pull-request-target-branches": typeof requirePullRequestTargetBranches;
123
206
  readonly "require-run-step-shell": typeof requireRunStepShell;
207
+ readonly "require-sarif-upload-security-events-write": typeof requireSarifUploadSecurityEventsWrite;
208
+ readonly "require-scorecard-results-format-sarif": typeof requireScorecardResultsFormatSarif;
209
+ readonly "require-scorecard-upload-sarif-step": typeof requireScorecardUploadSarifStep;
210
+ readonly "require-secret-scan-contents-read": typeof requireSecretScanContentsRead;
211
+ readonly "require-secret-scan-fetch-depth-zero": typeof requireSecretScanFetchDepthZero;
212
+ readonly "require-secret-scan-schedule": typeof requireSecretScanSchedule;
124
213
  readonly "require-template-categories": typeof requireTemplateCategories;
125
214
  readonly "require-template-file-patterns": typeof requireTemplateFilePatterns;
126
215
  readonly "require-template-icon-file-exists": typeof requireTemplateIconFileExists;
127
216
  readonly "require-template-icon-name": typeof requireTemplateIconName;
128
217
  readonly "require-template-workflow-name": typeof requireTemplateWorkflowName;
129
218
  readonly "require-trigger-types": typeof requireTriggerTypes;
219
+ readonly "require-trufflehog-verified-results-mode": typeof requireTrufflehogVerifiedResultsMode;
130
220
  readonly "require-workflow-call-input-type": typeof requireWorkflowCallInputType;
131
221
  readonly "require-workflow-call-output-value": typeof requireWorkflowCallOutputValue;
132
222
  readonly "require-workflow-concurrency": typeof requireWorkflowConcurrency;
@@ -1 +1 @@
1
- {"version":3,"file":"rules-registry.d.ts","sourceRoot":"","sources":["../../src/_internal/rules-registry.ts"],"names":[],"mappings":"AAMA,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,WAAW,MAAM,2BAA2B,CAAC;AACpD,OAAO,gBAAgB,MAAM,iCAAiC,CAAC;AAC/D,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,yBAAyB,MAAM,2CAA2C,CAAC;AAClF,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,qCAAqC,MAAM,0DAA0D,CAAC;AAC7G,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,YAAY,MAAM,4BAA4B,CAAC;AACtD,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,gCAAgC,MAAM,mDAAmD,CAAC;AACjG,OAAO,kCAAkC,MAAM,sDAAsD,CAAC;AACtG,OAAO,mBAAmB,MAAM,qCAAqC,CAAC;AACtE,OAAO,mCAAmC,MAAM,wDAAwD,CAAC;AACzG,OAAO,iBAAiB,MAAM,mCAAmC,CAAC;AAClE,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,gCAAgC,MAAM,qDAAqD,CAAC;AACnG,OAAO,iCAAiC,MAAM,mDAAmD,CAAC;AAClG,OAAO,0CAA0C,MAAM,8DAA8D,CAAC;AACtH,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,2BAA2B,MAAM,6CAA6C,CAAC;AACtF,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,uCAAuC,CAAC;AAC1E,OAAO,wBAAwB,MAAM,0CAA0C,CAAC;AAChF,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,eAAe,MAAM,+BAA+B,CAAC;AAC5D,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,iBAAiB,MAAM,iCAAiC,CAAC;AAChE,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,kBAAkB,MAAM,mCAAmC,CAAC;AACnE,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,4BAA4B,MAAM,8CAA8C,CAAC;AACxF,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mCAAmC,MAAM,oDAAoD,CAAC;AACrG,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,qCAAqC,MAAM,uDAAuD,CAAC;AAC1G,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,kBAAkB,MAAM,kCAAkC,CAAC;AAElE,0EAA0E;AAC1E,QAAA,MAAM,4BAA4B,EAAE;IAChC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,gBAAgB,CAAC;IACvD,QAAQ,CAAC,eAAe,EAAE,OAAO,WAAW,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,EAAE,OAAO,gBAAgB,CAAC;IACxD,QAAQ,CAAC,wCAAwC,EAAE,OAAO,iCAAiC,CAAC;IAC5F,QAAQ,CAAC,+BAA+B,EAAE,OAAO,yBAAyB,CAAC;IAC3E,QAAQ,CAAC,4BAA4B,EAAE,OAAO,uBAAuB,CAAC;IACtE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,iBAAiB,EAAE,OAAO,aAAa,CAAC;IACjD,QAAQ,CAAC,yCAAyC,EAAE,OAAO,kCAAkC,CAAC;IAC9F,QAAQ,CAAC,8CAA8C,EAAE,OAAO,qCAAqC,CAAC;IACtG,QAAQ,CAAC,oBAAoB,EAAE,OAAO,gBAAgB,CAAC;IACvD,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,gBAAgB,EAAE,OAAO,YAAY,CAAC;IAC/C,QAAQ,CAAC,sCAAsC,EAAE,OAAO,+BAA+B,CAAC;IACxF,QAAQ,CAAC,wCAAwC,EAAE,OAAO,iCAAiC,CAAC;IAC5F,QAAQ,CAAC,uCAAuC,EAAE,OAAO,gCAAgC,CAAC;IAC1F,QAAQ,CAAC,0CAA0C,EAAE,OAAO,kCAAkC,CAAC;IAC/F,QAAQ,CAAC,yBAAyB,EAAE,OAAO,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,4CAA4C,EAAE,OAAO,mCAAmC,CAAC;IAClG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,iBAAiB,CAAC;IAC3D,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,kBAAkB,EAAE,OAAO,aAAa,CAAC;IAClD,QAAQ,CAAC,yCAAyC,EAAE,OAAO,gCAAgC,CAAC;IAC5F,QAAQ,CAAC,uCAAuC,EAAE,OAAO,iCAAiC,CAAC;IAC3F,QAAQ,CAAC,kDAAkD,EAAE,OAAO,0CAA0C,CAAC;IAC/G,QAAQ,CAAC,kBAAkB,EAAE,OAAO,aAAa,CAAC;IAClD,QAAQ,CAAC,0BAA0B,EAAE,OAAO,qBAAqB,CAAC;IAClE,QAAQ,CAAC,oCAAoC,EAAE,OAAO,8BAA8B,CAAC;IACrF,QAAQ,CAAC,yCAAyC,EAAE,OAAO,kCAAkC,CAAC;IAC9F,QAAQ,CAAC,iCAAiC,EAAE,OAAO,2BAA2B,CAAC;IAC/E,QAAQ,CAAC,2BAA2B,EAAE,OAAO,sBAAsB,CAAC;IACpE,QAAQ,CAAC,2BAA2B,EAAE,OAAO,qBAAqB,CAAC;IACnE,QAAQ,CAAC,8BAA8B,EAAE,OAAO,wBAAwB,CAAC;IACzE,QAAQ,CAAC,0BAA0B,EAAE,OAAO,qBAAqB,CAAC;IAClE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,aAAa,CAAC;IACjD,QAAQ,CAAC,mBAAmB,EAAE,OAAO,eAAe,CAAC;IACrD,QAAQ,CAAC,kBAAkB,EAAE,OAAO,cAAc,CAAC;IACnD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,wBAAwB,EAAE,OAAO,mBAAmB,CAAC;IAC9D,QAAQ,CAAC,+BAA+B,EAAE,OAAO,0BAA0B,CAAC;IAC5E,QAAQ,CAAC,qBAAqB,EAAE,OAAO,iBAAiB,CAAC;IACzD,QAAQ,CAAC,yBAAyB,EAAE,OAAO,oBAAoB,CAAC;IAChE,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,cAAc,CAAC;IACnD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,kBAAkB,CAAC;IAC5D,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,wBAAwB,EAAE,OAAO,mBAAmB,CAAC;IAC9D,QAAQ,CAAC,6BAA6B,EAAE,OAAO,yBAAyB,CAAC;IACzE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,mCAAmC,EAAE,OAAO,6BAA6B,CAAC;IACnF,QAAQ,CAAC,4BAA4B,EAAE,OAAO,uBAAuB,CAAC;IACtE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,kCAAkC,EAAE,OAAO,4BAA4B,CAAC;IACjF,QAAQ,CAAC,oCAAoC,EAAE,OAAO,8BAA8B,CAAC;IACrF,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,wCAAwC,EAAE,OAAO,mCAAmC,CAAC;IAC9F,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,+BAA+B,EAAE,OAAO,0BAA0B,CAAC;IAC5E,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,2CAA2C,EAAE,OAAO,qCAAqC,CAAC;IACnG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,sBAAsB,EAAE,OAAO,kBAAkB,CAAC;CA+EpB,CAAC;AAE5C,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,EAAE,OAAO,4BACR,CAAC"}
1
+ {"version":3,"file":"rules-registry.d.ts","sourceRoot":"","sources":["../../src/_internal/rules-registry.ts"],"names":[],"mappings":"AAMA,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,WAAW,MAAM,2BAA2B,CAAC;AACpD,OAAO,gBAAgB,MAAM,iCAAiC,CAAC;AAC/D,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,wCAAwC,MAAM,2DAA2D,CAAC;AACjH,OAAO,+CAA+C,MAAM,mEAAmE,CAAC;AAChI,OAAO,yBAAyB,MAAM,2CAA2C,CAAC;AAClF,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,qCAAqC,MAAM,0DAA0D,CAAC;AAC7G,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,YAAY,MAAM,4BAA4B,CAAC;AACtD,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,gCAAgC,MAAM,mDAAmD,CAAC;AACjG,OAAO,kCAAkC,MAAM,mDAAmD,CAAC;AACnG,OAAO,kCAAkC,MAAM,sDAAsD,CAAC;AACtG,OAAO,mBAAmB,MAAM,qCAAqC,CAAC;AACtE,OAAO,mCAAmC,MAAM,wDAAwD,CAAC;AACzG,OAAO,iBAAiB,MAAM,mCAAmC,CAAC;AAClE,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,gCAAgC,MAAM,qDAAqD,CAAC;AACnG,OAAO,iCAAiC,MAAM,mDAAmD,CAAC;AAClG,OAAO,0CAA0C,MAAM,8DAA8D,CAAC;AACtH,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,2BAA2B,MAAM,6CAA6C,CAAC;AACtF,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,uCAAuC,CAAC;AAC1E,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,wBAAwB,MAAM,0CAA0C,CAAC;AAChF,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,eAAe,MAAM,+BAA+B,CAAC;AAC5D,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,iBAAiB,MAAM,iCAAiC,CAAC;AAChE,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,uCAAuC,MAAM,0DAA0D,CAAC;AAC/G,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,qBAAqB,MAAM,qCAAqC,CAAC;AACxE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,sCAAsC,MAAM,uDAAuD,CAAC;AAC3G,OAAO,6CAA6C,MAAM,gEAAgE,CAAC;AAC3H,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0CAA0C,MAAM,6DAA6D,CAAC;AACrH,OAAO,+CAA+C,MAAM,kEAAkE,CAAC;AAC/H,OAAO,oCAAoC,MAAM,sDAAsD,CAAC;AACxG,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,2CAA2C,MAAM,8DAA8D,CAAC;AACvH,OAAO,uBAAuB,MAAM,uCAAuC,CAAC;AAC5E,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,+CAA+C,MAAM,mEAAmE,CAAC;AAChI,OAAO,gCAAgC,MAAM,iDAAiD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,yCAAyC,MAAM,4DAA4D,CAAC;AACnH,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,qCAAqC,MAAM,wDAAwD,CAAC;AAC3G,OAAO,8CAA8C,MAAM,iEAAiE,CAAC;AAC7H,OAAO,yCAAyC,MAAM,4DAA4D,CAAC;AACnH,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,kBAAkB,MAAM,mCAAmC,CAAC;AACnE,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,qCAAqC,MAAM,wDAAwD,CAAC;AAC3G,OAAO,kCAAkC,MAAM,oDAAoD,CAAC;AACpG,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,yBAAyB,MAAM,0CAA0C,CAAC;AACjF,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,oCAAoC,MAAM,sDAAsD,CAAC;AACxG,OAAO,4BAA4B,MAAM,8CAA8C,CAAC;AACxF,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mCAAmC,MAAM,oDAAoD,CAAC;AACrG,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,qCAAqC,MAAM,uDAAuD,CAAC;AAC1G,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,kBAAkB,MAAM,kCAAkC,CAAC;AAElE,0EAA0E;AAC1E,QAAA,MAAM,4BAA4B,EAAE;IAChC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,gBAAgB,CAAC;IACvD,QAAQ,CAAC,eAAe,EAAE,OAAO,WAAW,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,EAAE,OAAO,gBAAgB,CAAC;IACxD,QAAQ,CAAC,wCAAwC,EAAE,OAAO,iCAAiC,CAAC;IAC5F,QAAQ,CAAC,+CAA+C,EAAE,OAAO,wCAAwC,CAAC;IAC1G,QAAQ,CAAC,uDAAuD,EAAE,OAAO,+CAA+C,CAAC;IACzH,QAAQ,CAAC,+BAA+B,EAAE,OAAO,yBAAyB,CAAC;IAC3E,QAAQ,CAAC,4BAA4B,EAAE,OAAO,uBAAuB,CAAC;IACtE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,iBAAiB,EAAE,OAAO,aAAa,CAAC;IACjD,QAAQ,CAAC,yCAAyC,EAAE,OAAO,kCAAkC,CAAC;IAC9F,QAAQ,CAAC,8CAA8C,EAAE,OAAO,qCAAqC,CAAC;IACtG,QAAQ,CAAC,oBAAoB,EAAE,OAAO,gBAAgB,CAAC;IACvD,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,gBAAgB,EAAE,OAAO,YAAY,CAAC;IAC/C,QAAQ,CAAC,sCAAsC,EAAE,OAAO,+BAA+B,CAAC;IACxF,QAAQ,CAAC,wCAAwC,EAAE,OAAO,iCAAiC,CAAC;IAC5F,QAAQ,CAAC,uCAAuC,EAAE,OAAO,gCAAgC,CAAC;IAC1F,QAAQ,CAAC,uCAAuC,EAAE,OAAO,kCAAkC,CAAC;IAC5F,QAAQ,CAAC,0CAA0C,EAAE,OAAO,kCAAkC,CAAC;IAC/F,QAAQ,CAAC,yBAAyB,EAAE,OAAO,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,4CAA4C,EAAE,OAAO,mCAAmC,CAAC;IAClG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,iBAAiB,CAAC;IAC3D,QAAQ,CAAC,gCAAgC,EAAE,OAAO,0BAA0B,CAAC;IAC7E,QAAQ,CAAC,kBAAkB,EAAE,OAAO,aAAa,CAAC;IAClD,QAAQ,CAAC,yCAAyC,EAAE,OAAO,gCAAgC,CAAC;IAC5F,QAAQ,CAAC,uCAAuC,EAAE,OAAO,iCAAiC,CAAC;IAC3F,QAAQ,CAAC,kDAAkD,EAAE,OAAO,0CAA0C,CAAC;IAC/G,QAAQ,CAAC,kBAAkB,EAAE,OAAO,aAAa,CAAC;IAClD,QAAQ,CAAC,0BAA0B,EAAE,OAAO,qBAAqB,CAAC;IAClE,QAAQ,CAAC,oCAAoC,EAAE,OAAO,8BAA8B,CAAC;IACrF,QAAQ,CAAC,6CAA6C,EAAE,OAAO,sCAAsC,CAAC;IACtG,QAAQ,CAAC,yCAAyC,EAAE,OAAO,kCAAkC,CAAC;IAC9F,QAAQ,CAAC,iCAAiC,EAAE,OAAO,2BAA2B,CAAC;IAC/E,QAAQ,CAAC,2BAA2B,EAAE,OAAO,sBAAsB,CAAC;IACpE,QAAQ,CAAC,2BAA2B,EAAE,OAAO,qBAAqB,CAAC;IACnE,QAAQ,CAAC,6CAA6C,EAAE,OAAO,sCAAsC,CAAC;IACtG,QAAQ,CAAC,8BAA8B,EAAE,OAAO,wBAAwB,CAAC;IACzE,QAAQ,CAAC,0BAA0B,EAAE,OAAO,qBAAqB,CAAC;IAClE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,aAAa,CAAC;IACjD,QAAQ,CAAC,mBAAmB,EAAE,OAAO,eAAe,CAAC;IACrD,QAAQ,CAAC,kBAAkB,EAAE,OAAO,cAAc,CAAC;IACnD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,wBAAwB,EAAE,OAAO,mBAAmB,CAAC;IAC9D,QAAQ,CAAC,+BAA+B,EAAE,OAAO,0BAA0B,CAAC;IAC5E,QAAQ,CAAC,qBAAqB,EAAE,OAAO,iBAAiB,CAAC;IACzD,QAAQ,CAAC,yBAAyB,EAAE,OAAO,oBAAoB,CAAC;IAChE,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,+BAA+B,EAAE,OAAO,0BAA0B,CAAC;IAC5E,QAAQ,CAAC,8CAA8C,EAAE,OAAO,uCAAuC,CAAC;IACxG,QAAQ,CAAC,qCAAqC,EAAE,OAAO,+BAA+B,CAAC;IACvF,QAAQ,CAAC,yBAAyB,EAAE,OAAO,qBAAqB,CAAC;IACjE,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,2CAA2C,EAAE,OAAO,sCAAsC,CAAC;IACpG,QAAQ,CAAC,oDAAoD,EAAE,OAAO,6CAA6C,CAAC;IACpH,QAAQ,CAAC,oCAAoC,EAAE,OAAO,8BAA8B,CAAC;IACrF,QAAQ,CAAC,iDAAiD,EAAE,OAAO,0CAA0C,CAAC;IAC9G,QAAQ,CAAC,0CAA0C,EAAE,OAAO,oCAAoC,CAAC;IACjG,QAAQ,CAAC,sDAAsD,EAAE,OAAO,+CAA+C,CAAC;IACxH,QAAQ,CAAC,6BAA6B,EAAE,OAAO,yBAAyB,CAAC;IACzE,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,kDAAkD,EAAE,OAAO,2CAA2C,CAAC;IAChH,QAAQ,CAAC,2BAA2B,EAAE,OAAO,uBAAuB,CAAC;IACrE,QAAQ,CAAC,6CAA6C,EAAE,OAAO,sCAAsC,CAAC;IACtG,QAAQ,CAAC,sCAAsC,EAAE,OAAO,iCAAiC,CAAC;IAC1F,QAAQ,CAAC,uDAAuD,EAAE,OAAO,+CAA+C,CAAC;IACzH,QAAQ,CAAC,qCAAqC,EAAE,OAAO,gCAAgC,CAAC;IACxF,QAAQ,CAAC,sCAAsC,EAAE,OAAO,iCAAiC,CAAC;IAC1F,QAAQ,CAAC,kCAAkC,EAAE,OAAO,6BAA6B,CAAC;IAClF,QAAQ,CAAC,sCAAsC,EAAE,OAAO,iCAAiC,CAAC;IAC1F,QAAQ,CAAC,kCAAkC,EAAE,OAAO,6BAA6B,CAAC;IAClF,QAAQ,CAAC,4BAA4B,EAAE,OAAO,wBAAwB,CAAC;IACvE,QAAQ,CAAC,4BAA4B,EAAE,OAAO,wBAAwB,CAAC;IACvE,QAAQ,CAAC,gDAAgD,EAAE,OAAO,yCAAyC,CAAC;IAC5G,QAAQ,CAAC,kCAAkC,EAAE,OAAO,6BAA6B,CAAC;IAClF,QAAQ,CAAC,4CAA4C,EAAE,OAAO,qCAAqC,CAAC;IACpG,QAAQ,CAAC,qDAAqD,EAAE,OAAO,8CAA8C,CAAC;IACtH,QAAQ,CAAC,gDAAgD,EAAE,OAAO,yCAAyC,CAAC;IAC5G,QAAQ,CAAC,qCAAqC,EAAE,OAAO,+BAA+B,CAAC;IACvF,QAAQ,CAAC,kBAAkB,EAAE,OAAO,cAAc,CAAC;IACnD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,kBAAkB,CAAC;IAC5D,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,6BAA6B,EAAE,OAAO,wBAAwB,CAAC;IACxE,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,wBAAwB,EAAE,OAAO,mBAAmB,CAAC;IAC9D,QAAQ,CAAC,4CAA4C,EAAE,OAAO,qCAAqC,CAAC;IACpG,QAAQ,CAAC,wCAAwC,EAAE,OAAO,kCAAkC,CAAC;IAC7F,QAAQ,CAAC,qCAAqC,EAAE,OAAO,+BAA+B,CAAC;IACvF,QAAQ,CAAC,mCAAmC,EAAE,OAAO,6BAA6B,CAAC;IACnF,QAAQ,CAAC,sCAAsC,EAAE,OAAO,+BAA+B,CAAC;IACxF,QAAQ,CAAC,8BAA8B,EAAE,OAAO,yBAAyB,CAAC;IAC1E,QAAQ,CAAC,6BAA6B,EAAE,OAAO,yBAAyB,CAAC;IACzE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,mCAAmC,EAAE,OAAO,6BAA6B,CAAC;IACnF,QAAQ,CAAC,4BAA4B,EAAE,OAAO,uBAAuB,CAAC;IACtE,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,0CAA0C,EAAE,OAAO,oCAAoC,CAAC;IACjG,QAAQ,CAAC,kCAAkC,EAAE,OAAO,4BAA4B,CAAC;IACjF,QAAQ,CAAC,oCAAoC,EAAE,OAAO,8BAA8B,CAAC;IACrF,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,sCAAsC,EAAE,OAAO,gCAAgC,CAAC;IACzF,QAAQ,CAAC,wCAAwC,EAAE,OAAO,mCAAmC,CAAC;IAC9F,QAAQ,CAAC,8BAA8B,EAAE,OAAO,0BAA0B,CAAC;IAC3E,QAAQ,CAAC,+BAA+B,EAAE,OAAO,0BAA0B,CAAC;IAC5E,QAAQ,CAAC,gCAAgC,EAAE,OAAO,2BAA2B,CAAC;IAC9E,QAAQ,CAAC,2CAA2C,EAAE,OAAO,qCAAqC,CAAC;IACnG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,mBAAmB,CAAC;IAC7D,QAAQ,CAAC,sBAAsB,EAAE,OAAO,kBAAkB,CAAC;CAgJpB,CAAC;AAE5C,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,EAAE,OAAO,4BACR,CAAC"}
@@ -2,6 +2,8 @@ import actionNameCasing from "../rules/action-name-casing.js";
2
2
  import jobIdCasing from "../rules/job-id-casing.js";
3
3
  import maxJobsPerAction from "../rules/max-jobs-per-action.js";
4
4
  import noCaseInsensitiveInputIdCollision from "../rules/no-case-insensitive-input-id-collision.js";
5
+ import noCodeqlAutobuildForJavaScriptTypeScript from "../rules/no-codeql-autobuild-for-javascript-typescript.js";
6
+ import noCodeqlJavascriptTypeScriptSplitLanguageMatrix from "../rules/no-codeql-javascript-typescript-split-language-matrix.js";
5
7
  import noCompositeInputEnvAccess from "../rules/no-composite-input-env-access.js";
6
8
  import noDeprecatedNodeRuntime from "../rules/no-deprecated-node-runtime.js";
7
9
  import noDuplicateCompositeStepId from "../rules/no-duplicate-composite-step-id.js";
@@ -15,6 +17,7 @@ import noInvalidKey from "../rules/no-invalid-key.js";
15
17
  import noInvalidReusableWorkflowJobKey from "../rules/no-invalid-reusable-workflow-job-key.js";
16
18
  import noInvalidTemplateFilePatternRegex from "../rules/no-invalid-template-file-pattern-regex.js";
17
19
  import noInvalidWorkflowCallOutputValue from "../rules/no-invalid-workflow-call-output-value.js";
20
+ import noOverlappingDependabotDirectories from "../rules/no-overlapping-dependabot-directories.js";
18
21
  import noPathSeparatorsInTemplateIconName from "../rules/no-path-separators-in-template-icon-name.js";
19
22
  import noPostIfWithoutPost from "../rules/no-post-if-without-post.js";
20
23
  import noPrHeadCheckoutInPullRequestTarget from "../rules/no-pr-head-checkout-in-pull-request-target.js";
@@ -27,10 +30,12 @@ import noTemplatePlaceholderInNonTemplateWorkflow from "../rules/no-template-pla
27
30
  import noTopLevelEnv from "../rules/no-top-level-env.js";
28
31
  import noTopLevelPermissions from "../rules/no-top-level-permissions.js";
29
32
  import noUniversalTemplateFilePattern from "../rules/no-universal-template-file-pattern.js";
33
+ import noUnknownDependabotMultiEcosystemGroup from "../rules/no-unknown-dependabot-multi-ecosystem-group.js";
30
34
  import noUnknownInputReferenceInComposite from "../rules/no-unknown-input-reference-in-composite.js";
31
35
  import noUnknownJobOutputReference from "../rules/no-unknown-job-output-reference.js";
32
36
  import noUnknownStepReference from "../rules/no-unknown-step-reference.js";
33
37
  import noUntrustedInputInRun from "../rules/no-untrusted-input-in-run.js";
38
+ import noUnusedDependabotEnableBetaEcosystems from "../rules/no-unused-dependabot-enable-beta-ecosystems.js";
34
39
  import noUnusedInputInComposite from "../rules/no-unused-input-in-composite.js";
35
40
  import noWriteAllPermissions from "../rules/no-write-all-permissions.js";
36
41
  import pinActionShas from "../rules/pin-action-shas.js";
@@ -43,19 +48,59 @@ import preferTemplateYmlExtension from "../rules/prefer-template-yml-extension.j
43
48
  import requireActionName from "../rules/require-action-name.js";
44
49
  import requireActionRunName from "../rules/require-action-run-name.js";
45
50
  import requireCheckoutBeforeLocalAction from "../rules/require-checkout-before-local-action.js";
51
+ import requireCodeqlActionsRead from "../rules/require-codeql-actions-read.js";
52
+ import requireCodeqlBranchFilters from "../rules/require-codeql-branch-filters.js";
53
+ import requireCodeqlCategoryWhenLanguageMatrix from "../rules/require-codeql-category-when-language-matrix.js";
54
+ import requireCodeqlPullRequestTrigger from "../rules/require-codeql-pull-request-trigger.js";
55
+ import requireCodeqlSchedule from "../rules/require-codeql-schedule.js";
56
+ import requireCodeqlSecurityEventsWrite from "../rules/require-codeql-security-events-write.js";
46
57
  import requireCompositeStepName from "../rules/require-composite-step-name.js";
58
+ import requireDependabotAssignees from "../rules/require-dependabot-assignees.js";
59
+ import requireDependabotAutomationPermissions from "../rules/require-dependabot-automation-permissions.js";
60
+ import requireDependabotAutomationPullRequestTrigger from "../rules/require-dependabot-automation-pull-request-trigger.js";
61
+ import requireDependabotBotActorGuard from "../rules/require-dependabot-bot-actor-guard.js";
62
+ import requireDependabotCommitMessageIncludeScope from "../rules/require-dependabot-commit-message-include-scope.js";
63
+ import requireDependabotCommitMessagePrefixDevelopment from "../rules/require-dependabot-commit-message-prefix-development.js";
64
+ import requireDependabotCommitMessagePrefix from "../rules/require-dependabot-commit-message-prefix.js";
65
+ import requireDependabotCooldown from "../rules/require-dependabot-cooldown.js";
66
+ import requireDependabotDirectory from "../rules/require-dependabot-directory.js";
67
+ import requireDependabotGithubActionsDirectoryRoot from "../rules/require-dependabot-github-actions-directory-root.js";
68
+ import requireDependabotLabels from "../rules/require-dependabot-labels.js";
69
+ import requireDependabotOpenPullRequestsLimit from "../rules/require-dependabot-open-pull-requests-limit.js";
70
+ import requireDependabotPackageEcosystem from "../rules/require-dependabot-package-ecosystem.js";
71
+ import requireDependabotPatternsForMultiEcosystemGroup from "../rules/require-dependabot-patterns-for-multi-ecosystem-group.js";
72
+ import requireDependabotScheduleCronjob from "../rules/require-dependabot-schedule-cronjob.js";
73
+ import requireDependabotScheduleInterval from "../rules/require-dependabot-schedule-interval.js";
74
+ import requireDependabotScheduleTime from "../rules/require-dependabot-schedule-time.js";
75
+ import requireDependabotScheduleTimezone from "../rules/require-dependabot-schedule-timezone.js";
76
+ import requireDependabotTargetBranch from "../rules/require-dependabot-target-branch.js";
77
+ import requireDependabotUpdates from "../rules/require-dependabot-updates.js";
78
+ import requireDependabotVersion from "../rules/require-dependabot-version.js";
79
+ import requireDependabotVersioningStrategyForNpm from "../rules/require-dependabot-versioning-strategy-for-npm.js";
80
+ import requireDependencyReviewAction from "../rules/require-dependency-review-action.js";
81
+ import requireDependencyReviewFailOnSeverity from "../rules/require-dependency-review-fail-on-severity.js";
82
+ import requireDependencyReviewPermissionsContentsRead from "../rules/require-dependency-review-permissions-contents-read.js";
83
+ import requireDependencyReviewPullRequestTrigger from "../rules/require-dependency-review-pull-request-trigger.js";
84
+ import requireFetchMetadataGithubToken from "../rules/require-fetch-metadata-github-token.js";
47
85
  import requireJobName from "../rules/require-job-name.js";
48
86
  import requireJobStepName from "../rules/require-job-step-name.js";
49
87
  import requireJobTimeoutMinutes from "../rules/require-job-timeout-minutes.js";
50
88
  import requireMergeGroupTrigger from "../rules/require-merge-group-trigger.js";
51
89
  import requirePullRequestTargetBranches from "../rules/require-pull-request-target-branches.js";
52
90
  import requireRunStepShell from "../rules/require-run-step-shell.js";
91
+ import requireSarifUploadSecurityEventsWrite from "../rules/require-sarif-upload-security-events-write.js";
92
+ import requireScorecardResultsFormatSarif from "../rules/require-scorecard-results-format-sarif.js";
93
+ import requireScorecardUploadSarifStep from "../rules/require-scorecard-upload-sarif-step.js";
94
+ import requireSecretScanContentsRead from "../rules/require-secret-scan-contents-read.js";
95
+ import requireSecretScanFetchDepthZero from "../rules/require-secret-scan-fetch-depth-zero.js";
96
+ import requireSecretScanSchedule from "../rules/require-secret-scan-schedule.js";
53
97
  import requireTemplateCategories from "../rules/require-template-categories.js";
54
98
  import requireTemplateFilePatterns from "../rules/require-template-file-patterns.js";
55
99
  import requireTemplateIconFileExists from "../rules/require-template-icon-file-exists.js";
56
100
  import requireTemplateIconName from "../rules/require-template-icon-name.js";
57
101
  import requireTemplateWorkflowName from "../rules/require-template-workflow-name.js";
58
102
  import requireTriggerTypes from "../rules/require-trigger-types.js";
103
+ import requireTrufflehogVerifiedResultsMode from "../rules/require-trufflehog-verified-results-mode.js";
59
104
  import requireWorkflowCallInputType from "../rules/require-workflow-call-input-type.js";
60
105
  import requireWorkflowCallOutputValue from "../rules/require-workflow-call-output-value.js";
61
106
  import requireWorkflowConcurrency from "../rules/require-workflow-concurrency.js";
@@ -73,6 +118,8 @@ const githubActionsRulesDefinition = {
73
118
  "job-id-casing": jobIdCasing,
74
119
  "max-jobs-per-action": maxJobsPerAction,
75
120
  "no-case-insensitive-input-id-collision": noCaseInsensitiveInputIdCollision,
121
+ "no-codeql-autobuild-for-javascript-typescript": noCodeqlAutobuildForJavaScriptTypeScript,
122
+ "no-codeql-javascript-typescript-split-language-matrix": noCodeqlJavascriptTypeScriptSplitLanguageMatrix,
76
123
  "no-composite-input-env-access": noCompositeInputEnvAccess,
77
124
  "no-deprecated-node-runtime": noDeprecatedNodeRuntime,
78
125
  "no-duplicate-composite-step-id": noDuplicateCompositeStepId,
@@ -86,6 +133,7 @@ const githubActionsRulesDefinition = {
86
133
  "no-invalid-reusable-workflow-job-key": noInvalidReusableWorkflowJobKey,
87
134
  "no-invalid-template-file-pattern-regex": noInvalidTemplateFilePatternRegex,
88
135
  "no-invalid-workflow-call-output-value": noInvalidWorkflowCallOutputValue,
136
+ "no-overlapping-dependabot-directories": noOverlappingDependabotDirectories,
89
137
  "no-path-separators-in-template-icon-name": noPathSeparatorsInTemplateIconName,
90
138
  "no-post-if-without-post": noPostIfWithoutPost,
91
139
  "no-pr-head-checkout-in-pull-request-target": noPrHeadCheckoutInPullRequestTarget,
@@ -98,10 +146,12 @@ const githubActionsRulesDefinition = {
98
146
  "no-top-level-env": noTopLevelEnv,
99
147
  "no-top-level-permissions": noTopLevelPermissions,
100
148
  "no-universal-template-file-pattern": noUniversalTemplateFilePattern,
149
+ "no-unknown-dependabot-multi-ecosystem-group": noUnknownDependabotMultiEcosystemGroup,
101
150
  "no-unknown-input-reference-in-composite": noUnknownInputReferenceInComposite,
102
151
  "no-unknown-job-output-reference": noUnknownJobOutputReference,
103
152
  "no-unknown-step-reference": noUnknownStepReference,
104
153
  "no-untrusted-input-in-run": noUntrustedInputInRun,
154
+ "no-unused-dependabot-enable-beta-ecosystems": noUnusedDependabotEnableBetaEcosystems,
105
155
  "no-unused-input-in-composite": noUnusedInputInComposite,
106
156
  "no-write-all-permissions": noWriteAllPermissions,
107
157
  "pin-action-shas": pinActionShas,
@@ -114,19 +164,59 @@ const githubActionsRulesDefinition = {
114
164
  "require-action-name": requireActionName,
115
165
  "require-action-run-name": requireActionRunName,
116
166
  "require-checkout-before-local-action": requireCheckoutBeforeLocalAction,
167
+ "require-codeql-actions-read": requireCodeqlActionsRead,
168
+ "require-codeql-branch-filters": requireCodeqlBranchFilters,
169
+ "require-codeql-category-when-language-matrix": requireCodeqlCategoryWhenLanguageMatrix,
170
+ "require-codeql-pull-request-trigger": requireCodeqlPullRequestTrigger,
171
+ "require-codeql-schedule": requireCodeqlSchedule,
172
+ "require-codeql-security-events-write": requireCodeqlSecurityEventsWrite,
117
173
  "require-composite-step-name": requireCompositeStepName,
174
+ "require-dependabot-assignees": requireDependabotAssignees,
175
+ "require-dependabot-automation-permissions": requireDependabotAutomationPermissions,
176
+ "require-dependabot-automation-pull-request-trigger": requireDependabotAutomationPullRequestTrigger,
177
+ "require-dependabot-bot-actor-guard": requireDependabotBotActorGuard,
178
+ "require-dependabot-commit-message-include-scope": requireDependabotCommitMessageIncludeScope,
179
+ "require-dependabot-commit-message-prefix": requireDependabotCommitMessagePrefix,
180
+ "require-dependabot-commit-message-prefix-development": requireDependabotCommitMessagePrefixDevelopment,
181
+ "require-dependabot-cooldown": requireDependabotCooldown,
182
+ "require-dependabot-directory": requireDependabotDirectory,
183
+ "require-dependabot-github-actions-directory-root": requireDependabotGithubActionsDirectoryRoot,
184
+ "require-dependabot-labels": requireDependabotLabels,
185
+ "require-dependabot-open-pull-requests-limit": requireDependabotOpenPullRequestsLimit,
186
+ "require-dependabot-package-ecosystem": requireDependabotPackageEcosystem,
187
+ "require-dependabot-patterns-for-multi-ecosystem-group": requireDependabotPatternsForMultiEcosystemGroup,
188
+ "require-dependabot-schedule-cronjob": requireDependabotScheduleCronjob,
189
+ "require-dependabot-schedule-interval": requireDependabotScheduleInterval,
190
+ "require-dependabot-schedule-time": requireDependabotScheduleTime,
191
+ "require-dependabot-schedule-timezone": requireDependabotScheduleTimezone,
192
+ "require-dependabot-target-branch": requireDependabotTargetBranch,
193
+ "require-dependabot-updates": requireDependabotUpdates,
194
+ "require-dependabot-version": requireDependabotVersion,
195
+ "require-dependabot-versioning-strategy-for-npm": requireDependabotVersioningStrategyForNpm,
196
+ "require-dependency-review-action": requireDependencyReviewAction,
197
+ "require-dependency-review-fail-on-severity": requireDependencyReviewFailOnSeverity,
198
+ "require-dependency-review-permissions-contents-read": requireDependencyReviewPermissionsContentsRead,
199
+ "require-dependency-review-pull-request-trigger": requireDependencyReviewPullRequestTrigger,
200
+ "require-fetch-metadata-github-token": requireFetchMetadataGithubToken,
118
201
  "require-job-name": requireJobName,
119
202
  "require-job-step-name": requireJobStepName,
120
203
  "require-job-timeout-minutes": requireJobTimeoutMinutes,
121
204
  "require-merge-group-trigger": requireMergeGroupTrigger,
122
205
  "require-pull-request-target-branches": requirePullRequestTargetBranches,
123
206
  "require-run-step-shell": requireRunStepShell,
207
+ "require-sarif-upload-security-events-write": requireSarifUploadSecurityEventsWrite,
208
+ "require-scorecard-results-format-sarif": requireScorecardResultsFormatSarif,
209
+ "require-scorecard-upload-sarif-step": requireScorecardUploadSarifStep,
210
+ "require-secret-scan-contents-read": requireSecretScanContentsRead,
211
+ "require-secret-scan-fetch-depth-zero": requireSecretScanFetchDepthZero,
212
+ "require-secret-scan-schedule": requireSecretScanSchedule,
124
213
  "require-template-categories": requireTemplateCategories,
125
214
  "require-template-file-patterns": requireTemplateFilePatterns,
126
215
  "require-template-icon-file-exists": requireTemplateIconFileExists,
127
216
  "require-template-icon-name": requireTemplateIconName,
128
217
  "require-template-workflow-name": requireTemplateWorkflowName,
129
218
  "require-trigger-types": requireTriggerTypes,
219
+ "require-trufflehog-verified-results-mode": requireTrufflehogVerifiedResultsMode,
130
220
  "require-workflow-call-input-type": requireWorkflowCallInputType,
131
221
  "require-workflow-call-output-value": requireWorkflowCallOutputValue,
132
222
  "require-workflow-concurrency": requireWorkflowConcurrency,
@@ -1 +1 @@
1
- {"version":3,"file":"rules-registry.js","sourceRoot":"","sources":["../../src/_internal/rules-registry.ts"],"names":[],"mappings":"AAMA,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,WAAW,MAAM,2BAA2B,CAAC;AACpD,OAAO,gBAAgB,MAAM,iCAAiC,CAAC;AAC/D,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,yBAAyB,MAAM,2CAA2C,CAAC;AAClF,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,qCAAqC,MAAM,0DAA0D,CAAC;AAC7G,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,YAAY,MAAM,4BAA4B,CAAC;AACtD,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,gCAAgC,MAAM,mDAAmD,CAAC;AACjG,OAAO,kCAAkC,MAAM,sDAAsD,CAAC;AACtG,OAAO,mBAAmB,MAAM,qCAAqC,CAAC;AACtE,OAAO,mCAAmC,MAAM,wDAAwD,CAAC;AACzG,OAAO,iBAAiB,MAAM,mCAAmC,CAAC;AAClE,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,gCAAgC,MAAM,qDAAqD,CAAC;AACnG,OAAO,iCAAiC,MAAM,mDAAmD,CAAC;AAClG,OAAO,0CAA0C,MAAM,8DAA8D,CAAC;AACtH,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,2BAA2B,MAAM,6CAA6C,CAAC;AACtF,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,uCAAuC,CAAC;AAC1E,OAAO,wBAAwB,MAAM,0CAA0C,CAAC;AAChF,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,eAAe,MAAM,+BAA+B,CAAC;AAC5D,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,iBAAiB,MAAM,iCAAiC,CAAC;AAChE,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,kBAAkB,MAAM,mCAAmC,CAAC;AACnE,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,4BAA4B,MAAM,8CAA8C,CAAC;AACxF,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mCAAmC,MAAM,oDAAoD,CAAC;AACrG,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,qCAAqC,MAAM,uDAAuD,CAAC;AAC1G,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,kBAAkB,MAAM,kCAAkC,CAAC;AAElE,0EAA0E;AAC1E,MAAM,4BAA4B,GAsE9B;IACA,oBAAoB,EAAE,gBAAgB;IACtC,eAAe,EAAE,WAAW;IAC5B,qBAAqB,EAAE,gBAAgB;IACvC,wCAAwC,EAAE,iCAAiC;IAC3E,+BAA+B,EAAE,yBAAyB;IAC1D,4BAA4B,EAAE,uBAAuB;IACrD,gCAAgC,EAAE,0BAA0B;IAC5D,gCAAgC,EAAE,0BAA0B;IAC5D,iBAAiB,EAAE,aAAa;IAChC,yCAAyC,EACrC,kCAAkC;IACtC,8CAA8C,EAC1C,qCAAqC;IACzC,oBAAoB,EAAE,gBAAgB;IACtC,gCAAgC,EAAE,2BAA2B;IAC7D,gBAAgB,EAAE,YAAY;IAC9B,sCAAsC,EAAE,+BAA+B;IACvE,wCAAwC,EAAE,iCAAiC;IAC3E,uCAAuC,EAAE,gCAAgC;IACzE,0CAA0C,EACtC,kCAAkC;IACtC,yBAAyB,EAAE,mBAAmB;IAC9C,4CAA4C,EACxC,mCAAmC;IACvC,uBAAuB,EAAE,iBAAiB;IAC1C,gCAAgC,EAAE,0BAA0B;IAC5D,kBAAkB,EAAE,aAAa;IACjC,yCAAyC,EAAE,gCAAgC;IAC3E,uCAAuC,EAAE,iCAAiC;IAC1E,kDAAkD,EAC9C,0CAA0C;IAC9C,kBAAkB,EAAE,aAAa;IACjC,0BAA0B,EAAE,qBAAqB;IACjD,oCAAoC,EAAE,8BAA8B;IACpE,yCAAyC,EACrC,kCAAkC;IACtC,iCAAiC,EAAE,2BAA2B;IAC9D,2BAA2B,EAAE,sBAAsB;IACnD,2BAA2B,EAAE,qBAAqB;IAClD,8BAA8B,EAAE,wBAAwB;IACxD,0BAA0B,EAAE,qBAAqB;IACjD,iBAAiB,EAAE,aAAa;IAChC,mBAAmB,EAAE,eAAe;IACpC,kBAAkB,EAAE,cAAc;IAClC,uBAAuB,EAAE,mBAAmB;IAC5C,uBAAuB,EAAE,mBAAmB;IAC5C,wBAAwB,EAAE,mBAAmB;IAC7C,+BAA+B,EAAE,0BAA0B;IAC3D,qBAAqB,EAAE,iBAAiB;IACxC,yBAAyB,EAAE,oBAAoB;IAC/C,sCAAsC,EAAE,gCAAgC;IACxE,6BAA6B,EAAE,wBAAwB;IACvD,kBAAkB,EAAE,cAAc;IAClC,uBAAuB,EAAE,kBAAkB;IAC3C,6BAA6B,EAAE,wBAAwB;IACvD,6BAA6B,EAAE,wBAAwB;IACvD,sCAAsC,EAAE,gCAAgC;IACxE,wBAAwB,EAAE,mBAAmB;IAC7C,6BAA6B,EAAE,yBAAyB;IACxD,gCAAgC,EAAE,2BAA2B;IAC7D,mCAAmC,EAAE,6BAA6B;IAClE,4BAA4B,EAAE,uBAAuB;IACrD,gCAAgC,EAAE,2BAA2B;IAC7D,uBAAuB,EAAE,mBAAmB;IAC5C,kCAAkC,EAAE,4BAA4B;IAChE,oCAAoC,EAAE,8BAA8B;IACpE,8BAA8B,EAAE,0BAA0B;IAC1D,sCAAsC,EAAE,gCAAgC;IACxE,wCAAwC,EACpC,mCAAmC;IACvC,8BAA8B,EAAE,0BAA0B;IAC1D,+BAA+B,EAAE,0BAA0B;IAC3D,gCAAgC,EAAE,2BAA2B;IAC7D,2CAA2C,EACvC,qCAAqC;IACzC,uBAAuB,EAAE,mBAAmB;IAC5C,sBAAsB,EAAE,kBAAkB;CACH,CAAC;AAE5C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAC3B,4BAA4B,CAAC"}
1
+ {"version":3,"file":"rules-registry.js","sourceRoot":"","sources":["../../src/_internal/rules-registry.ts"],"names":[],"mappings":"AAMA,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,WAAW,MAAM,2BAA2B,CAAC;AACpD,OAAO,gBAAgB,MAAM,iCAAiC,CAAC;AAC/D,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,wCAAwC,MAAM,2DAA2D,CAAC;AACjH,OAAO,+CAA+C,MAAM,mEAAmE,CAAC;AAChI,OAAO,yBAAyB,MAAM,2CAA2C,CAAC;AAClF,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,qCAAqC,MAAM,0DAA0D,CAAC;AAC7G,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,YAAY,MAAM,4BAA4B,CAAC;AACtD,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,oDAAoD,CAAC;AACnG,OAAO,gCAAgC,MAAM,mDAAmD,CAAC;AACjG,OAAO,kCAAkC,MAAM,mDAAmD,CAAC;AACnG,OAAO,kCAAkC,MAAM,sDAAsD,CAAC;AACtG,OAAO,mBAAmB,MAAM,qCAAqC,CAAC;AACtE,OAAO,mCAAmC,MAAM,wDAAwD,CAAC;AACzG,OAAO,iBAAiB,MAAM,mCAAmC,CAAC;AAClE,OAAO,0BAA0B,MAAM,4CAA4C,CAAC;AACpF,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,gCAAgC,MAAM,qDAAqD,CAAC;AACnG,OAAO,iCAAiC,MAAM,mDAAmD,CAAC;AAClG,OAAO,0CAA0C,MAAM,8DAA8D,CAAC;AACtH,OAAO,aAAa,MAAM,8BAA8B,CAAC;AACzD,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,kCAAkC,MAAM,qDAAqD,CAAC;AACrG,OAAO,2BAA2B,MAAM,6CAA6C,CAAC;AACtF,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,uCAAuC,CAAC;AAC1E,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,wBAAwB,MAAM,0CAA0C,CAAC;AAChF,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,eAAe,MAAM,+BAA+B,CAAC;AAC5D,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,iBAAiB,MAAM,iCAAiC,CAAC;AAChE,OAAO,oBAAoB,MAAM,qCAAqC,CAAC;AACvE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,uCAAuC,MAAM,0DAA0D,CAAC;AAC/G,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,qBAAqB,MAAM,qCAAqC,CAAC;AACxE,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,sCAAsC,MAAM,uDAAuD,CAAC;AAC3G,OAAO,6CAA6C,MAAM,gEAAgE,CAAC;AAC3H,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0CAA0C,MAAM,6DAA6D,CAAC;AACrH,OAAO,+CAA+C,MAAM,kEAAkE,CAAC;AAC/H,OAAO,oCAAoC,MAAM,sDAAsD,CAAC;AACxG,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,2CAA2C,MAAM,8DAA8D,CAAC;AACvH,OAAO,uBAAuB,MAAM,uCAAuC,CAAC;AAC5E,OAAO,sCAAsC,MAAM,yDAAyD,CAAC;AAC7G,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,+CAA+C,MAAM,mEAAmE,CAAC;AAChI,OAAO,gCAAgC,MAAM,iDAAiD,CAAC;AAC/F,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,iCAAiC,MAAM,kDAAkD,CAAC;AACjG,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,wBAAwB,MAAM,wCAAwC,CAAC;AAC9E,OAAO,yCAAyC,MAAM,4DAA4D,CAAC;AACnH,OAAO,6BAA6B,MAAM,8CAA8C,CAAC;AACzF,OAAO,qCAAqC,MAAM,wDAAwD,CAAC;AAC3G,OAAO,8CAA8C,MAAM,iEAAiE,CAAC;AAC7H,OAAO,yCAAyC,MAAM,4DAA4D,CAAC;AACnH,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,cAAc,MAAM,8BAA8B,CAAC;AAC1D,OAAO,kBAAkB,MAAM,mCAAmC,CAAC;AACnE,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,wBAAwB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,qCAAqC,MAAM,wDAAwD,CAAC;AAC3G,OAAO,kCAAkC,MAAM,oDAAoD,CAAC;AACpG,OAAO,+BAA+B,MAAM,iDAAiD,CAAC;AAC9F,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,+BAA+B,MAAM,kDAAkD,CAAC;AAC/F,OAAO,yBAAyB,MAAM,0CAA0C,CAAC;AACjF,OAAO,yBAAyB,MAAM,yCAAyC,CAAC;AAChF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAC1F,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,oCAAoC,MAAM,sDAAsD,CAAC;AACxG,OAAO,4BAA4B,MAAM,8CAA8C,CAAC;AACxF,OAAO,8BAA8B,MAAM,gDAAgD,CAAC;AAC5F,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,gCAAgC,MAAM,kDAAkD,CAAC;AAChG,OAAO,mCAAmC,MAAM,oDAAoD,CAAC;AACrG,OAAO,0BAA0B,MAAM,0CAA0C,CAAC;AAClF,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,2BAA2B,MAAM,4CAA4C,CAAC;AACrF,OAAO,qCAAqC,MAAM,uDAAuD,CAAC;AAC1G,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AACpE,OAAO,kBAAkB,MAAM,kCAAkC,CAAC;AAElE,0EAA0E;AAC1E,MAAM,4BAA4B,GAmH9B;IACA,oBAAoB,EAAE,gBAAgB;IACtC,eAAe,EAAE,WAAW;IAC5B,qBAAqB,EAAE,gBAAgB;IACvC,wCAAwC,EAAE,iCAAiC;IAC3E,+CAA+C,EAC3C,wCAAwC;IAC5C,uDAAuD,EACnD,+CAA+C;IACnD,+BAA+B,EAAE,yBAAyB;IAC1D,4BAA4B,EAAE,uBAAuB;IACrD,gCAAgC,EAAE,0BAA0B;IAC5D,gCAAgC,EAAE,0BAA0B;IAC5D,iBAAiB,EAAE,aAAa;IAChC,yCAAyC,EACrC,kCAAkC;IACtC,8CAA8C,EAC1C,qCAAqC;IACzC,oBAAoB,EAAE,gBAAgB;IACtC,gCAAgC,EAAE,2BAA2B;IAC7D,gBAAgB,EAAE,YAAY;IAC9B,sCAAsC,EAAE,+BAA+B;IACvE,wCAAwC,EAAE,iCAAiC;IAC3E,uCAAuC,EAAE,gCAAgC;IACzE,uCAAuC,EAAE,kCAAkC;IAC3E,0CAA0C,EACtC,kCAAkC;IACtC,yBAAyB,EAAE,mBAAmB;IAC9C,4CAA4C,EACxC,mCAAmC;IACvC,uBAAuB,EAAE,iBAAiB;IAC1C,gCAAgC,EAAE,0BAA0B;IAC5D,kBAAkB,EAAE,aAAa;IACjC,yCAAyC,EAAE,gCAAgC;IAC3E,uCAAuC,EAAE,iCAAiC;IAC1E,kDAAkD,EAC9C,0CAA0C;IAC9C,kBAAkB,EAAE,aAAa;IACjC,0BAA0B,EAAE,qBAAqB;IACjD,oCAAoC,EAAE,8BAA8B;IACpE,6CAA6C,EACzC,sCAAsC;IAC1C,yCAAyC,EACrC,kCAAkC;IACtC,iCAAiC,EAAE,2BAA2B;IAC9D,2BAA2B,EAAE,sBAAsB;IACnD,2BAA2B,EAAE,qBAAqB;IAClD,6CAA6C,EACzC,sCAAsC;IAC1C,8BAA8B,EAAE,wBAAwB;IACxD,0BAA0B,EAAE,qBAAqB;IACjD,iBAAiB,EAAE,aAAa;IAChC,mBAAmB,EAAE,eAAe;IACpC,kBAAkB,EAAE,cAAc;IAClC,uBAAuB,EAAE,mBAAmB;IAC5C,uBAAuB,EAAE,mBAAmB;IAC5C,wBAAwB,EAAE,mBAAmB;IAC7C,+BAA+B,EAAE,0BAA0B;IAC3D,qBAAqB,EAAE,iBAAiB;IACxC,yBAAyB,EAAE,oBAAoB;IAC/C,sCAAsC,EAAE,gCAAgC;IACxE,6BAA6B,EAAE,wBAAwB;IACvD,+BAA+B,EAAE,0BAA0B;IAC3D,8CAA8C,EAC1C,uCAAuC;IAC3C,qCAAqC,EAAE,+BAA+B;IACtE,yBAAyB,EAAE,qBAAqB;IAChD,sCAAsC,EAAE,gCAAgC;IACxE,6BAA6B,EAAE,wBAAwB;IACvD,8BAA8B,EAAE,0BAA0B;IAC1D,2CAA2C,EACvC,sCAAsC;IAC1C,oDAAoD,EAChD,6CAA6C;IACjD,oCAAoC,EAAE,8BAA8B;IACpE,iDAAiD,EAC7C,0CAA0C;IAC9C,0CAA0C,EACtC,oCAAoC;IACxC,sDAAsD,EAClD,+CAA+C;IACnD,6BAA6B,EAAE,yBAAyB;IACxD,8BAA8B,EAAE,0BAA0B;IAC1D,kDAAkD,EAC9C,2CAA2C;IAC/C,2BAA2B,EAAE,uBAAuB;IACpD,6CAA6C,EACzC,sCAAsC;IAC1C,sCAAsC,EAAE,iCAAiC;IACzE,uDAAuD,EACnD,+CAA+C;IACnD,qCAAqC,EAAE,gCAAgC;IACvE,sCAAsC,EAAE,iCAAiC;IACzE,kCAAkC,EAAE,6BAA6B;IACjE,sCAAsC,EAAE,iCAAiC;IACzE,kCAAkC,EAAE,6BAA6B;IACjE,4BAA4B,EAAE,wBAAwB;IACtD,4BAA4B,EAAE,wBAAwB;IACtD,gDAAgD,EAC5C,yCAAyC;IAC7C,kCAAkC,EAAE,6BAA6B;IACjE,4CAA4C,EACxC,qCAAqC;IACzC,qDAAqD,EACjD,8CAA8C;IAClD,gDAAgD,EAC5C,yCAAyC;IAC7C,qCAAqC,EAAE,+BAA+B;IACtE,kBAAkB,EAAE,cAAc;IAClC,uBAAuB,EAAE,kBAAkB;IAC3C,6BAA6B,EAAE,wBAAwB;IACvD,6BAA6B,EAAE,wBAAwB;IACvD,sCAAsC,EAAE,gCAAgC;IACxE,wBAAwB,EAAE,mBAAmB;IAC7C,4CAA4C,EACxC,qCAAqC;IACzC,wCAAwC,EACpC,kCAAkC;IACtC,qCAAqC,EAAE,+BAA+B;IACtE,mCAAmC,EAAE,6BAA6B;IAClE,sCAAsC,EAAE,+BAA+B;IACvE,8BAA8B,EAAE,yBAAyB;IACzD,6BAA6B,EAAE,yBAAyB;IACxD,gCAAgC,EAAE,2BAA2B;IAC7D,mCAAmC,EAAE,6BAA6B;IAClE,4BAA4B,EAAE,uBAAuB;IACrD,gCAAgC,EAAE,2BAA2B;IAC7D,uBAAuB,EAAE,mBAAmB;IAC5C,0CAA0C,EACtC,oCAAoC;IACxC,kCAAkC,EAAE,4BAA4B;IAChE,oCAAoC,EAAE,8BAA8B;IACpE,8BAA8B,EAAE,0BAA0B;IAC1D,sCAAsC,EAAE,gCAAgC;IACxE,wCAAwC,EACpC,mCAAmC;IACvC,8BAA8B,EAAE,0BAA0B;IAC1D,+BAA+B,EAAE,0BAA0B;IAC3D,gCAAgC,EAAE,2BAA2B;IAC7D,2CAA2C,EACvC,qCAAqC;IACzC,uBAAuB,EAAE,mBAAmB;IAC5C,sBAAsB,EAAE,kBAAkB;CACH,CAAC;AAE5C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAC3B,4BAA4B,CAAC"}
@@ -0,0 +1,24 @@
1
+ /**
2
+ * @packageDocumentation
3
+ * Helpers for secret-scanning workflows such as Gitleaks and TruffleHog.
4
+ */
5
+ import type { AST } from "yaml-eslint-parser";
6
+ import type { WorkflowActionStep } from "./workflow-action-steps.js";
7
+ /** Determine whether a `uses` reference points to the Gitleaks action. */
8
+ export declare const isGitleaksActionReference: (usesReference: string) => boolean;
9
+ /** Determine whether a `uses` reference points to the TruffleHog action. */
10
+ export declare const isTrufflehogActionReference: (usesReference: string) => boolean;
11
+ /**
12
+ * Determine whether a `uses` reference points to a supported secret scanning
13
+ * action.
14
+ */
15
+ export declare const isSecretScanningActionReference: (usesReference: string) => boolean;
16
+ /** Collect all supported secret scanning action steps in a workflow. */
17
+ export declare const getSecretScanningActionSteps: (root: AST.YAMLMapping) => readonly WorkflowActionStep[];
18
+ /** Collect all Gitleaks action steps in a workflow. */
19
+ export declare const getGitleaksActionSteps: (root: AST.YAMLMapping) => readonly WorkflowActionStep[];
20
+ /** Collect all TruffleHog action steps in a workflow. */
21
+ export declare const getTrufflehogActionSteps: (root: AST.YAMLMapping) => readonly WorkflowActionStep[];
22
+ /** Determine whether a workflow uses any supported secret scanning action. */
23
+ export declare const hasSecretScanningAction: (root: AST.YAMLMapping) => boolean;
24
+ //# sourceMappingURL=secret-scanning-workflow.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"secret-scanning-workflow.d.ts","sourceRoot":"","sources":["../../src/_internal/secret-scanning-workflow.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAIrE,0EAA0E;AAC1E,eAAO,MAAM,yBAAyB,GAAI,eAAe,MAAM,KAAG,OACF,CAAC;AAEjE,4EAA4E;AAC5E,eAAO,MAAM,2BAA2B,GAAI,eAAe,MAAM,KAAG,OACF,CAAC;AAEnE;;;GAGG;AACH,eAAO,MAAM,+BAA+B,GACxC,eAAe,MAAM,KACtB,OAE2C,CAAC;AAE/C,wEAAwE;AACxE,eAAO,MAAM,4BAA4B,GACrC,MAAM,GAAG,CAAC,WAAW,KACtB,SAAS,kBAAkB,EACmC,CAAC;AAElE,uDAAuD;AACvD,eAAO,MAAM,sBAAsB,GAC/B,MAAM,GAAG,CAAC,WAAW,KACtB,SAAS,kBAAkB,EAC6B,CAAC;AAE5D,yDAAyD;AACzD,eAAO,MAAM,wBAAwB,GACjC,MAAM,GAAG,CAAC,WAAW,KACtB,SAAS,kBAAkB,EAC+B,CAAC;AAE9D,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,GAAI,MAAM,GAAG,CAAC,WAAW,KAAG,OACf,CAAC"}
@@ -0,0 +1,21 @@
1
+ import { getWorkflowActionSteps } from "./workflow-action-steps.js";
2
+ /** Determine whether a `uses` reference points to the Gitleaks action. */
3
+ export const isGitleaksActionReference = (usesReference) => usesReference.trim().startsWith("gitleaks/gitleaks-action@");
4
+ /** Determine whether a `uses` reference points to the TruffleHog action. */
5
+ export const isTrufflehogActionReference = (usesReference) => usesReference.trim().startsWith("trufflesecurity/trufflehog@");
6
+ /**
7
+ * Determine whether a `uses` reference points to a supported secret scanning
8
+ * action.
9
+ */
10
+ export const isSecretScanningActionReference = (usesReference) => isGitleaksActionReference(usesReference) ||
11
+ isTrufflehogActionReference(usesReference);
12
+ /** Collect all supported secret scanning action steps in a workflow. */
13
+ export const getSecretScanningActionSteps = (root) => getWorkflowActionSteps(root, isSecretScanningActionReference);
14
+ /** Collect all Gitleaks action steps in a workflow. */
15
+ export const getGitleaksActionSteps = (root) => getWorkflowActionSteps(root, isGitleaksActionReference);
16
+ /** Collect all TruffleHog action steps in a workflow. */
17
+ export const getTrufflehogActionSteps = (root) => getWorkflowActionSteps(root, isTrufflehogActionReference);
18
+ /** Determine whether a workflow uses any supported secret scanning action. */
19
+ export const hasSecretScanningAction = (root) => getSecretScanningActionSteps(root).length > 0;
20
+ /* eslint-enable @typescript-eslint/prefer-readonly-parameter-types -- Re-enable readonly-parameter checks outside parser AST helper signatures. */
21
+ //# sourceMappingURL=secret-scanning-workflow.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"secret-scanning-workflow.js","sourceRoot":"","sources":["../../src/_internal/secret-scanning-workflow.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,aAAqB,EAAW,EAAE,CACxE,aAAa,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;AAEjE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,aAAqB,EAAW,EAAE,CAC1E,aAAa,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC;AAEnE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC3C,aAAqB,EACd,EAAE,CACT,yBAAyB,CAAC,aAAa,CAAC;IACxC,2BAA2B,CAAC,aAAa,CAAC,CAAC;AAE/C,wEAAwE;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CACxC,IAAqB,EACQ,EAAE,CAC/B,sBAAsB,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;AAElE,uDAAuD;AACvD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAClC,IAAqB,EACQ,EAAE,CAC/B,sBAAsB,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;AAE5D,yDAAyD;AACzD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACpC,IAAqB,EACQ,EAAE,CAC/B,sBAAsB,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;AAE9D,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAqB,EAAW,EAAE,CACtE,4BAA4B,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAElD,mJAAmJ"}
@@ -0,0 +1,35 @@
1
+ /**
2
+ * @packageDocumentation
3
+ * Shared helpers for workflow steps that use actions or run shell scripts.
4
+ */
5
+ import type { AST } from "yaml-eslint-parser";
6
+ import { type WorkflowJobEntry } from "./workflow-yaml.js";
7
+ /** Workflow step using an external action via `uses`. */
8
+ export type WorkflowActionStep = {
9
+ readonly job: WorkflowJobEntry;
10
+ readonly stepMapping: AST.YAMLMapping;
11
+ readonly usesPair: AST.YAMLPair;
12
+ readonly usesReference: string;
13
+ };
14
+ /** Workflow step running a shell script via `run`. */
15
+ export type WorkflowRunStep = {
16
+ readonly job: WorkflowJobEntry;
17
+ readonly runPair: AST.YAMLPair;
18
+ readonly runScript: string;
19
+ readonly stepMapping: AST.YAMLMapping;
20
+ };
21
+ /**
22
+ * Collect workflow steps using actions whose `uses` reference matches a
23
+ * predicate.
24
+ */
25
+ export declare const getWorkflowActionSteps: (root: AST.YAMLMapping, matchesReference: (usesReference: string) => boolean) => readonly WorkflowActionStep[];
26
+ /**
27
+ * Determine whether any workflow step uses an action whose reference matches a
28
+ * predicate.
29
+ */
30
+ export declare const hasWorkflowActionStep: (root: AST.YAMLMapping, matchesReference: (usesReference: string) => boolean) => boolean;
31
+ /** Collect workflow run steps whose run script matches a predicate. */
32
+ export declare const getWorkflowRunSteps: (root: AST.YAMLMapping, matchesRunScript: (runScript: string) => boolean) => readonly WorkflowRunStep[];
33
+ /** Determine whether any workflow run step matches a script predicate. */
34
+ export declare const hasWorkflowRunStep: (root: AST.YAMLMapping, matchesRunScript: (runScript: string) => boolean) => boolean;
35
+ //# sourceMappingURL=workflow-action-steps.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"workflow-action-steps.d.ts","sourceRoot":"","sources":["../../src/_internal/workflow-action-steps.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAMH,KAAK,gBAAgB,EACxB,MAAM,oBAAoB,CAAC;AAE5B,yDAAyD;AACzD,MAAM,MAAM,kBAAkB,GAAG;IAC7B,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,sDAAsD;AACtD,MAAM,MAAM,eAAe,GAAG;IAC1B,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC;CACzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GAC/B,MAAM,GAAG,CAAC,WAAW,EACrB,kBAAkB,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,KACrD,SAAS,kBAAkB,EAsC7B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAC9B,MAAM,GAAG,CAAC,WAAW,EACrB,kBAAkB,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,KACrD,OAAoE,CAAC;AAExE,uEAAuE;AACvE,eAAO,MAAM,mBAAmB,GAC5B,MAAM,GAAG,CAAC,WAAW,EACrB,kBAAkB,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,KACjD,SAAS,eAAe,EAsC1B,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,GAC3B,MAAM,GAAG,CAAC,WAAW,EACrB,kBAAkB,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,KACjD,OAAiE,CAAC"}
@@ -0,0 +1,75 @@
1
+ import { getMappingPair, getMappingValueAsSequence, getScalarStringValue, getWorkflowJobs, unwrapYamlValue, } from "./workflow-yaml.js";
2
+ /**
3
+ * Collect workflow steps using actions whose `uses` reference matches a
4
+ * predicate.
5
+ */
6
+ export const getWorkflowActionSteps = (root, matchesReference) => {
7
+ const steps = [];
8
+ for (const job of getWorkflowJobs(root)) {
9
+ const stepsSequence = getMappingValueAsSequence(job.mapping, "steps");
10
+ if (stepsSequence === null) {
11
+ continue;
12
+ }
13
+ for (const entry of stepsSequence.entries) {
14
+ const stepMapping = unwrapYamlValue(entry);
15
+ if (stepMapping?.type !== "YAMLMapping") {
16
+ continue;
17
+ }
18
+ const usesPair = getMappingPair(stepMapping, "uses");
19
+ const usesReference = getScalarStringValue(usesPair?.value ?? null);
20
+ if (usesPair === null || usesReference === null) {
21
+ continue;
22
+ }
23
+ if (!matchesReference(usesReference)) {
24
+ continue;
25
+ }
26
+ steps.push({
27
+ job,
28
+ stepMapping,
29
+ usesPair,
30
+ usesReference,
31
+ });
32
+ }
33
+ }
34
+ return steps;
35
+ };
36
+ /**
37
+ * Determine whether any workflow step uses an action whose reference matches a
38
+ * predicate.
39
+ */
40
+ export const hasWorkflowActionStep = (root, matchesReference) => getWorkflowActionSteps(root, matchesReference).length > 0;
41
+ /** Collect workflow run steps whose run script matches a predicate. */
42
+ export const getWorkflowRunSteps = (root, matchesRunScript) => {
43
+ const steps = [];
44
+ for (const job of getWorkflowJobs(root)) {
45
+ const stepsSequence = getMappingValueAsSequence(job.mapping, "steps");
46
+ if (stepsSequence === null) {
47
+ continue;
48
+ }
49
+ for (const entry of stepsSequence.entries) {
50
+ const stepMapping = unwrapYamlValue(entry);
51
+ if (stepMapping?.type !== "YAMLMapping") {
52
+ continue;
53
+ }
54
+ const runPair = getMappingPair(stepMapping, "run");
55
+ const runScript = getScalarStringValue(runPair?.value ?? null);
56
+ if (runPair === null || runScript === null) {
57
+ continue;
58
+ }
59
+ if (!matchesRunScript(runScript)) {
60
+ continue;
61
+ }
62
+ steps.push({
63
+ job,
64
+ runPair,
65
+ runScript,
66
+ stepMapping,
67
+ });
68
+ }
69
+ }
70
+ return steps;
71
+ };
72
+ /** Determine whether any workflow run step matches a script predicate. */
73
+ export const hasWorkflowRunStep = (root, matchesRunScript) => getWorkflowRunSteps(root, matchesRunScript).length > 0;
74
+ /* eslint-enable @typescript-eslint/prefer-readonly-parameter-types -- Re-enable readonly-parameter checks outside parser AST helper signatures. */
75
+ //# sourceMappingURL=workflow-action-steps.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"workflow-action-steps.js","sourceRoot":"","sources":["../../src/_internal/workflow-action-steps.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAElB,MAAM,oBAAoB,CAAC;AAkB5B;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAClC,IAAqB,EACrB,gBAAoD,EACvB,EAAE;IAC/B,MAAM,KAAK,GAAyB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,yBAAyB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEtE,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YACzB,SAAS;QACb,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAE3C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;gBACtC,SAAS;YACb,CAAC;YAED,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;YAEpE,IAAI,QAAQ,KAAK,IAAI,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC9C,SAAS;YACb,CAAC;YAED,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;gBACnC,SAAS;YACb,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACP,GAAG;gBACH,WAAW;gBACX,QAAQ;gBACR,aAAa;aAChB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,IAAqB,EACrB,gBAAoD,EAC7C,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAExE,uEAAuE;AACvE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAC/B,IAAqB,EACrB,gBAAgD,EACtB,EAAE;IAC5B,MAAM,KAAK,GAAsB,EAAE,CAAC;IAEpC,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,yBAAyB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEtE,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YACzB,SAAS;QACb,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YAE3C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;gBACtC,SAAS;YACb,CAAC;YAED,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;YAE/D,IAAI,OAAO,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACzC,SAAS;YACb,CAAC;YAED,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,SAAS;YACb,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACP,GAAG;gBACH,OAAO;gBACP,SAAS;gBACT,WAAW;aACd,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAC9B,IAAqB,EACrB,gBAAgD,EACzC,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAErE,mJAAmJ"}