eslint-plugin-github-actions-2 1.0.2 → 1.0.4

package/dist/rules/require-merge-group-trigger.js.map

@@ -1 +1 @@
-{"version":3,"file":"require-merge-group-trigger.js","sourceRoot":"","sources":["../../src/rules/require-merge-group-trigger.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,wEAAwE;AACxE,MAAM,eAAe,GAAG,CACpB,IAA+B,EAC/B,SAAiB,EACV,EAAE;IACT,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;IAEvD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChC,OAAO,oBAAoB,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;IACvD,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CACvB,CAAC,KAAK,EAAE,EAAE,CACN,KAAK,KAAK,IAAI,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,SAAS,CAClE,CAAC;IACN,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC;AACvD,CAAC,CAAC;AAEF,8DAA8D;AAC9D,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;oBAC1D,OAAO;gBACX,CAAC;gBAED,IAAI,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;oBACvC,OAAO;gBACX,CAAC;gBAED,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;gBAEvD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACnB,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,mBAAmB;oBAC9B,IAAI,EAAE,OAA+B;iBACxC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,8HAA8H;YAClI,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,oGAAoG;SAC5G;QACD,QAAQ,EAAE;YACN,iBAAiB,EACb,0JAA0J;SACjK;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"require-merge-group-trigger.js","sourceRoot":"","sources":["../../src/rules/require-merge-group-trigger.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,wEAAwE;AACxE,MAAM,eAAe,GAAG,CACpB,IAA+B,EAC/B,SAAiB,EACV,EAAE;IACT,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;IAEvD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAChC,OAAO,oBAAoB,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;IACvD,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CACvB,CAAC,KAAK,EAAE,EAAE,CACN,KAAK,KAAK,IAAI,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,SAAS,CAClE,CAAC;IACN,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC;AACvD,CAAC,CAAC;AAEF,8DAA8D;AAC9D,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;oBAC1D,OAAO;gBACX,CAAC;gBAED,IAAI,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;oBACvC,OAAO;gBACX,CAAC;gBAED,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;gBAEvD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACnB,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,mBAAmB;oBAC9B,IAAI,EAAE,OAA+B;iBACxC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,8HAA8H;YAClI,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,oGAAoG;SAC5G;QACD,QAAQ,EAAE;YACN,iBAAiB,EACb,0JAA0J;SACjK;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-pull-request-target-branches.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"require-pull-request-target-branches.d.ts","sourceRoot":"","sources":["../../src/rules/require-pull-request-target-branches.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAsCnC,8EAA8E;AAC9E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAuHhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"require-pull-request-target-branches.d.ts","sourceRoot":"","sources":["../../src/rules/require-pull-request-target-branches.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAsCnC,8EAA8E;AAC9E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA0HhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-pull-request-target-branches.js

@@ -78,6 +78,7 @@ const rule = {
         };
     },
     meta: {
+        deprecated: false,
         docs: {
             configs: [
                 "github-actions.configs.all",
@@ -85,6 +86,8 @@ const rule = {
                 "github-actions.configs.strict",
             ],
             description: "require `on.pull_request_target` triggers to scope target base branches with `branches` or `branches-ignore` so privileged workflows do not react to every branch by default.",
+            dialects: ["GitHub Actions workflow"],
+            frozen: false,
             recommended: false,
             requiresTypeChecking: false,
             ruleId: "R032",

package/dist/rules/require-pull-request-target-branches.js.map

@@ -1 +1 @@
-{"version":3,"file":"require-pull-request-target-branches.js","sourceRoot":"","sources":["../../src/rules/require-pull-request-target-branches.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,yEAAyE;AACzE,MAAM,yBAAyB,GAAG,CAC9B,IAA+C,EACxC,EAAE;IACT,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;IAEvD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAE9C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,8EAA8E;AAC9E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,MAAM,yBAAyB,GAAG,CAC9B,IAA4B,EACxB,EAAE;YACN,OAAO,CAAC,MAAM,CAAC;gBACX,SAAS,EAAE,qBAAqB;gBAChC,IAAI,EAAE,IAA4B;aACrC,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;gBAEvD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACnB,OAAO;gBACX,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAChC,IACI,oBAAoB,CAAC,OAAO,CAAC,KAAK,qBAAqB,EACzD,CAAC;wBACC,yBAAyB,CAAC,OAAO,CAAC,CAAC;oBACvC,CAAC;oBAED,OAAO;gBACX,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBAClC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;wBAClC,IACI,KAAK,KAAK,IAAI;4BACd,oBAAoB,CAAC,KAAK,CAAC;gCACvB,qBAAqB,EAC3B,CAAC;4BACC,yBAAyB,CAAC,KAAK,CAAC,CAAC;wBACrC,CAAC;oBACL,CAAC;oBAED,OAAO;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAEvD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACrB,OAAO;gBACX,CAAC;gBAED,MAAM,qBAAqB,GAAG,cAAc,CACxC,SAAS,EACT,qBAAqB,CACxB,CAAC;gBACF,MAAM,sBAAsB,GAAG,eAAe,CAC1C,qBAAqB,EAAE,KAAK,IAAI,IAAI,CACvC,CAAC;gBAEF,IAAI,qBAAqB,KAAK,IAAI,EAAE,CAAC;oBACjC,OAAO;gBACX,CAAC;gBAED,IAAI,sBAAsB,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;oBACjD,yBAAyB,CACrB,CAAC,qBAAqB,CAAC,KAAK;wBACxB,qBAAqB,CAAiB,CAC7C,CAAC;oBAEF,OAAO;gBACX,CAAC;gBAED,MAAM,YAAY,GAAG,cAAc,CAC/B,sBAAsB,EACtB,UAAU,CACb,CAAC;gBACF,MAAM,kBAAkB,GAAG,cAAc,CACrC,sBAAsB,EACtB,iBAAiB,CACpB,CAAC;gBAEF,IACI,yBAAyB,CAAC,YAAY,CAAC;oBACvC,yBAAyB,CAAC,kBAAkB,CAAC,EAC/C,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;YACtD,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,iCAAiC;gBACjC,+BAA+B;aAClC;YACD,WAAW,EACP,+KAA+K;YACnL,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,6GAA6G;SACrH;QACD,QAAQ,EAAE;YACN,mBAAmB,EACf,+JAA+J;SACtK;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"require-pull-request-target-branches.js","sourceRoot":"","sources":["../../src/rules/require-pull-request-target-branches.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,yEAAyE;AACzE,MAAM,yBAAyB,GAAG,CAC9B,IAA+C,EACxC,EAAE;IACT,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;IAEvD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAE9C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAE1C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,8EAA8E;AAC9E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,MAAM,yBAAyB,GAAG,CAC9B,IAA4B,EACxB,EAAE;YACN,OAAO,CAAC,MAAM,CAAC;gBACX,SAAS,EAAE,qBAAqB;gBAChC,IAAI,EAAE,IAA4B;aACrC,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;gBAEvD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACnB,OAAO;gBACX,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAChC,IACI,oBAAoB,CAAC,OAAO,CAAC,KAAK,qBAAqB,EACzD,CAAC;wBACC,yBAAyB,CAAC,OAAO,CAAC,CAAC;oBACvC,CAAC;oBAED,OAAO;gBACX,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBAClC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;wBAClC,IACI,KAAK,KAAK,IAAI;4BACd,oBAAoB,CAAC,KAAK,CAAC;gCACvB,qBAAqB,EAC3B,CAAC;4BACC,yBAAyB,CAAC,KAAK,CAAC,CAAC;wBACrC,CAAC;oBACL,CAAC;oBAED,OAAO;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAEvD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACrB,OAAO;gBACX,CAAC;gBAED,MAAM,qBAAqB,GAAG,cAAc,CACxC,SAAS,EACT,qBAAqB,CACxB,CAAC;gBACF,MAAM,sBAAsB,GAAG,eAAe,CAC1C,qBAAqB,EAAE,KAAK,IAAI,IAAI,CACvC,CAAC;gBAEF,IAAI,qBAAqB,KAAK,IAAI,EAAE,CAAC;oBACjC,OAAO;gBACX,CAAC;gBAED,IAAI,sBAAsB,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;oBACjD,yBAAyB,CACrB,CAAC,qBAAqB,CAAC,KAAK;wBACxB,qBAAqB,CAAiB,CAC7C,CAAC;oBAEF,OAAO;gBACX,CAAC;gBAED,MAAM,YAAY,GAAG,cAAc,CAC/B,sBAAsB,EACtB,UAAU,CACb,CAAC;gBACF,MAAM,kBAAkB,GAAG,cAAc,CACrC,sBAAsB,EACtB,iBAAiB,CACpB,CAAC;gBAEF,IACI,yBAAyB,CAAC,YAAY,CAAC;oBACvC,yBAAyB,CAAC,kBAAkB,CAAC,EAC/C,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;YACtD,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,iCAAiC;gBACjC,+BAA+B;aAClC;YACD,WAAW,EACP,+KAA+K;YACnL,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,6GAA6G;SACrH;QACD,QAAQ,EAAE;YACN,mBAAmB,EACf,+JAA+J;SACtK;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-run-step-shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"require-run-step-shell.d.ts","sourceRoot":"","sources":["../../src/rules/require-run-step-shell.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAgDnC,sEAAsE;AACtE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAsIhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"require-run-step-shell.d.ts","sourceRoot":"","sources":["../../src/rules/require-run-step-shell.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAgDnC,sEAAsE;AACtE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAyIhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-run-step-shell.js

@@ -90,12 +90,15 @@ const rule = {
         };
     },
     meta: {
+        deprecated: false,
         docs: {
             configs: [
                 "github-actions.configs.all",
                 "github-actions.configs.strict",
             ],
             description: "require `run` steps to use an explicit shell directly or through `defaults.run.shell` so execution behavior stays predictable across runners.",
+            dialects: ["GitHub Actions workflow"],
+            frozen: false,
             recommended: false,
             requiresTypeChecking: false,
             ruleId: "R021",

package/dist/rules/require-run-step-shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"require-run-step-shell.js","sourceRoot":"","sources":["../../src/rules/require-run-step-shell.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAKvC,+DAA+D;AAC/D,MAAM,wBAAwB,GAAG,CAC7B,SAAwC,EACnB,EAAE;IACvB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEzD,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACtD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC,CAAC;AAEF,gEAAgE;AAChE,MAAM,uBAAuB,GAAG,CAC5B,OAAkC,EACf,EAAE;IACrB,MAAM,eAAe,GAAG,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAEtE,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAE5E,OAAO,kBAAkB,KAAK,IAAI;QAC9B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,cAAc,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC,CAAC;AAEF,sEAAsE;AACtE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,MAAM,kBAAkB,GAAG,CACvB,SAAiC,EACjC,KAAa,EACT,EAAE;YACN,OAAO,CAAC,MAAM,CAAC;gBACX,IAAI,EAAE;oBACF,KAAK;iBACR;gBACD,SAAS,EAAE,cAAc;gBACzB,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,SAAS,CAAyB;aAC/D,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBACxD,MAAM,kBAAkB,GACpB,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;gBAEhD,IACI,iBAAiB,KAAK,IAAI;oBAC1B,kBAAkB,KAAK,SAAS,EAClC,CAAC;oBACC,kBAAkB,CACd,iBAAiB,EACjB,+BAA+B,CAClC,CAAC;gBACN,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,YAAY,GAAG,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBAC1D,MAAM,aAAa,GACf,wBAAwB,CAAC,YAAY,CAAC,CAAC;oBAE3C,IAAI,YAAY,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;wBACvD,kBAAkB,CACd,YAAY,EACZ,QAAQ,GAAG,CAAC,EAAE,sBAAsB,CACvC,CAAC;oBACN,CAAC;oBAED,MAAM,aAAa,GAAG,yBAAyB,CAC3C,GAAG,CAAC,OAAO,EACX,OAAO,CACV,CAAC;oBAEF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;wBACzB,SAAS;oBACb,CAAC;oBAED,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;wBACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;wBAE3C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;4BACtC,SAAS;wBACb,CAAC;wBAED,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;wBAEnD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;4BACnB,SAAS;wBACb,CAAC;wBAED,MAAM,aAAa,GAAG,cAAc,CAChC,WAAW,EACX,OAAO,CACV,CAAC;wBACF,MAAM,cAAc,GAChB,wBAAwB,CAAC,aAAa,CAAC,CAAC;wBAE5C,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;4BACzB,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;gCAC7B,SAAS;4BACb,CAAC;4BAED,kBAAkB,CACd,aAAa,EACb,sBAAsB,GAAG,CAAC,EAAE,GAAG,CAClC,CAAC;4BAEF,SAAS;wBACb,CAAC;wBAED,IACI,aAAa,KAAK,SAAS;4BAC3B,kBAAkB,KAAK,SAAS,EAClC,CAAC;4BACC,SAAS;wBACb,CAAC;wBAED,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,KAAK,EAAE,GAAG,CAAC,EAAE;6BAChB;4BACD,SAAS,EAAE,cAAc;4BACzB,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK;gCAChB,WAAW,CAAyB;yBAC3C,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,+IAA+I;YACnJ,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,+FAA+F;SACvG;QACD,QAAQ,EAAE;YACN,YAAY,EACR,iEAAiE;YACrE,YAAY,EACR,4GAA4G;SACnH;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"require-run-step-shell.js","sourceRoot":"","sources":["../../src/rules/require-run-step-shell.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAKvC,+DAA+D;AAC/D,MAAM,wBAAwB,GAAG,CAC7B,SAAwC,EACnB,EAAE;IACvB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEzD,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACtD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC,CAAC;AAEF,gEAAgE;AAChE,MAAM,uBAAuB,GAAG,CAC5B,OAAkC,EACf,EAAE;IACrB,MAAM,eAAe,GAAG,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAEtE,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAE5E,OAAO,kBAAkB,KAAK,IAAI;QAC9B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,cAAc,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC,CAAC;AAEF,sEAAsE;AACtE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,MAAM,kBAAkB,GAAG,CACvB,SAAiC,EACjC,KAAa,EACT,EAAE;YACN,OAAO,CAAC,MAAM,CAAC;gBACX,IAAI,EAAE;oBACF,KAAK;iBACR;gBACD,SAAS,EAAE,cAAc;gBACzB,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,SAAS,CAAyB;aAC/D,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBACxD,MAAM,kBAAkB,GACpB,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;gBAEhD,IACI,iBAAiB,KAAK,IAAI;oBAC1B,kBAAkB,KAAK,SAAS,EAClC,CAAC;oBACC,kBAAkB,CACd,iBAAiB,EACjB,+BAA+B,CAClC,CAAC;gBACN,CAAC;gBAED,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,YAAY,GAAG,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBAC1D,MAAM,aAAa,GACf,wBAAwB,CAAC,YAAY,CAAC,CAAC;oBAE3C,IAAI,YAAY,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;wBACvD,kBAAkB,CACd,YAAY,EACZ,QAAQ,GAAG,CAAC,EAAE,sBAAsB,CACvC,CAAC;oBACN,CAAC;oBAED,MAAM,aAAa,GAAG,yBAAyB,CAC3C,GAAG,CAAC,OAAO,EACX,OAAO,CACV,CAAC;oBAEF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;wBACzB,SAAS;oBACb,CAAC;oBAED,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;wBACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;wBAE3C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;4BACtC,SAAS;wBACb,CAAC;wBAED,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;wBAEnD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;4BACnB,SAAS;wBACb,CAAC;wBAED,MAAM,aAAa,GAAG,cAAc,CAChC,WAAW,EACX,OAAO,CACV,CAAC;wBACF,MAAM,cAAc,GAChB,wBAAwB,CAAC,aAAa,CAAC,CAAC;wBAE5C,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;4BACzB,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;gCAC7B,SAAS;4BACb,CAAC;4BAED,kBAAkB,CACd,aAAa,EACb,sBAAsB,GAAG,CAAC,EAAE,GAAG,CAClC,CAAC;4BAEF,SAAS;wBACb,CAAC;wBAED,IACI,aAAa,KAAK,SAAS;4BAC3B,kBAAkB,KAAK,SAAS,EAClC,CAAC;4BACC,SAAS;wBACb,CAAC;wBAED,OAAO,CAAC,MAAM,CAAC;4BACX,IAAI,EAAE;gCACF,KAAK,EAAE,GAAG,CAAC,EAAE;6BAChB;4BACD,SAAS,EAAE,cAAc;4BACzB,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK;gCAChB,WAAW,CAAyB;yBAC3C,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,+BAA+B;aAClC;YACD,WAAW,EACP,+IAA+I;YACnJ,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,+FAA+F;SACvG;QACD,QAAQ,EAAE;YACN,YAAY,EACR,iEAAiE;YACrE,YAAY,EACR,4GAA4G;SACnH;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-sarif-upload-security-events-write.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require workflows uploading SARIF to grant security-events write.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for SARIF upload permission requirements. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-sarif-upload-security-events-write.d.ts.map

package/dist/rules/require-sarif-upload-security-events-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-sarif-upload-security-events-write.d.ts","sourceRoot":"","sources":["../../src/rules/require-sarif-upload-security-events-write.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAMnC,oEAAoE;AACpE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAwDhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-sarif-upload-security-events-write.js

@@ -0,0 +1,51 @@
+import { getSarifUploadSteps } from "../_internal/code-scanning-workflow.js";
+import { hasRequiredWorkflowPermission } from "../_internal/workflow-permissions.js";
+import { getWorkflowRoot } from "../_internal/workflow-yaml.js";
+/** Rule implementation for SARIF upload permission requirements. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const step of getSarifUploadSteps(root)) {
+                    if (hasRequiredWorkflowPermission(root, step.job, "security-events", "write")) {
+                        continue;
+                    }
+                    context.report({
+                        data: { jobId: step.job.id },
+                        messageId: "missingSecurityEventsWrite",
+                        node: step.job.idNode,
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.codeScanning",
+                "github-actions.configs.security",
+            ],
+            description: "require jobs uploading SARIF to GitHub code scanning to grant `security-events: write`.",
+            dialects: ["GitHub Actions workflow"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R102",
+            ruleNumber: 102,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-sarif-upload-security-events-write",
+        },
+        messages: {
+            missingSecurityEventsWrite: "Job '{{jobId}}' uploads SARIF results and should grant `security-events: write`.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-sarif-upload-security-events-write.js.map

package/dist/rules/require-sarif-upload-security-events-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-sarif-upload-security-events-write.js","sourceRoot":"","sources":["../../src/rules/require-sarif-upload-security-events-write.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,oEAAoE;AACpE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3C,IACI,6BAA6B,CACzB,IAAI,EACJ,IAAI,CAAC,GAAG,EACR,iBAAiB,EACjB,OAAO,CACV,EACH,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;wBAC5B,SAAS,EAAE,4BAA4B;wBACvC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAA8B;qBAChD,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,qCAAqC;gBACrC,iCAAiC;aACpC;YACD,WAAW,EACP,yFAAyF;YAC7F,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,GAAG;YACf,GAAG,EAAE,mHAAmH;SAC3H;QACD,QAAQ,EAAE;YACN,0BAA0B,EACtB,kFAAkF;SACzF;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-scorecard-results-format-sarif.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require Scorecard workflows to emit SARIF results.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring Scorecard SARIF output. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-scorecard-results-format-sarif.d.ts.map

package/dist/rules/require-scorecard-results-format-sarif.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-scorecard-results-format-sarif.d.ts","sourceRoot":"","sources":["../../src/rules/require-scorecard-results-format-sarif.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAUnC,gEAAgE;AAChE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA+DhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-scorecard-results-format-sarif.js

@@ -0,0 +1,57 @@
+import { getScorecardSteps } from "../_internal/code-scanning-workflow.js";
+import { getMappingPair, getMappingValueAsMapping, getScalarStringValue, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
+/** Rule implementation for requiring Scorecard SARIF output. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const step of getScorecardSteps(root)) {
+                    const withMapping = getMappingValueAsMapping(step.stepMapping, "with");
+                    const formatPair = withMapping === null
+                        ? null
+                        : getMappingPair(withMapping, "results_format");
+                    const formatValue = getScalarStringValue(formatPair?.value ?? null)?.trim();
+                    if (formatValue === "sarif") {
+                        continue;
+                    }
+                    context.report({
+                        data: { jobId: step.job.id },
+                        messageId: "missingSarifResultsFormat",
+                        node: (formatPair?.value ??
+                            formatPair ??
+                            withMapping ??
+                            step.usesPair),
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.codeScanning",
+            ],
+            description: "require `ossf/scorecard-action` steps to set `results_format: sarif`.",
+            dialects: ["GitHub Actions workflow"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R103",
+            ruleNumber: 103,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-scorecard-results-format-sarif",
+        },
+        messages: {
+            missingSarifResultsFormat: "Scorecard step in job '{{jobId}}' should set `results_format: sarif`.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-scorecard-results-format-sarif.js.map

package/dist/rules/require-scorecard-results-format-sarif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-scorecard-results-format-sarif.js","sourceRoot":"","sources":["../../src/rules/require-scorecard-results-format-sarif.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,gEAAgE;AAChE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzC,MAAM,WAAW,GAAG,wBAAwB,CACxC,IAAI,CAAC,WAAW,EAChB,MAAM,CACT,CAAC;oBACF,MAAM,UAAU,GACZ,WAAW,KAAK,IAAI;wBAChB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;oBACxD,MAAM,WAAW,GAAG,oBAAoB,CACpC,UAAU,EAAE,KAAK,IAAI,IAAI,CAC5B,EAAE,IAAI,EAAE,CAAC;oBAEV,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;wBAC1B,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;wBAC5B,SAAS,EAAE,2BAA2B;wBACtC,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK;4BACpB,UAAU;4BACV,WAAW;4BACX,IAAI,CAAC,QAAQ,CAAyB;qBAC7C,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,qCAAqC;aACxC;YACD,WAAW,EACP,uEAAuE;YAC3E,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,GAAG;YACf,GAAG,EAAE,+GAA+G;SACvH;QACD,QAAQ,EAAE;YACN,yBAAyB,EACrB,uEAAuE;SAC9E;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-scorecard-upload-sarif-step.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require Scorecard workflows producing SARIF to upload it with upload-sarif.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring SARIF upload in Scorecard workflows. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-scorecard-upload-sarif-step.d.ts.map

package/dist/rules/require-scorecard-upload-sarif-step.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-scorecard-upload-sarif-step.d.ts","sourceRoot":"","sources":["../../src/rules/require-scorecard-upload-sarif-step.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAQnC,6EAA6E;AAC7E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA6ChB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-scorecard-upload-sarif-step.js

@@ -0,0 +1,46 @@
+import { getSarifUploadSteps, getScorecardSteps, } from "../_internal/code-scanning-workflow.js";
+import { getWorkflowRoot } from "../_internal/workflow-yaml.js";
+/** Rule implementation for requiring SARIF upload in Scorecard workflows. */
+const rule = {
+    create(context) {
+        return {
+            Program(node) {
+                const root = getWorkflowRoot(context);
+                if (root === null || getScorecardSteps(root).length === 0) {
+                    return;
+                }
+                if (getSarifUploadSteps(root).length > 0) {
+                    return;
+                }
+                context.report({
+                    messageId: "missingSarifUpload",
+                    node: node,
+                });
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.codeScanning",
+            ],
+            description: "require workflows using `ossf/scorecard-action` to upload SARIF results to GitHub code scanning.",
+            dialects: ["GitHub Actions workflow"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R104",
+            ruleNumber: 104,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-scorecard-upload-sarif-step",
+        },
+        messages: {
+            missingSarifUpload: "Scorecard workflows producing SARIF should upload the result with `github/codeql-action/upload-sarif`.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-scorecard-upload-sarif-step.js.map

package/dist/rules/require-scorecard-upload-sarif-step.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-scorecard-upload-sarif-step.js","sourceRoot":"","sources":["../../src/rules/require-scorecard-upload-sarif-step.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,mBAAmB,EACnB,iBAAiB,GACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,6EAA6E;AAC7E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO,CAAC,IAAI;gBACR,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxD,OAAO;gBACX,CAAC;gBAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvC,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,oBAAoB;oBAC/B,IAAI,EAAE,IAA4B;iBACrC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,qCAAqC;aACxC;YACD,WAAW,EACP,kGAAkG;YACtG,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,GAAG;YACf,GAAG,EAAE,4GAA4G;SACpH;QACD,QAAQ,EAAE;YACN,kBAAkB,EACd,wGAAwG;SAC/G;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-secret-scan-contents-read.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @packageDocumentation
+ * Require secret scanning workflows to grant contents read permissions.
+ */
+import type { Rule } from "eslint";
+/**
+ * Rule implementation for secret-scanning contents read permission
+ * requirements.
+ */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-secret-scan-contents-read.d.ts.map

package/dist/rules/require-secret-scan-contents-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-secret-scan-contents-read.d.ts","sourceRoot":"","sources":["../../src/rules/require-secret-scan-contents-read.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAMnC;;;GAGG;AACH,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAuDhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-secret-scan-contents-read.js

@@ -0,0 +1,53 @@
+import { getSecretScanningActionSteps } from "../_internal/secret-scanning-workflow.js";
+import { hasRequiredWorkflowPermission } from "../_internal/workflow-permissions.js";
+import { getWorkflowRoot } from "../_internal/workflow-yaml.js";
+/**
+ * Rule implementation for secret-scanning contents read permission
+ * requirements.
+ */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const step of getSecretScanningActionSteps(root)) {
+                    if (hasRequiredWorkflowPermission(root, step.job, "contents", "read")) {
+                        continue;
+                    }
+                    context.report({
+                        data: { jobId: step.job.id },
+                        messageId: "missingContentsRead",
+                        node: step.job.idNode,
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.security",
+            ],
+            description: "require secret scanning workflows to grant `contents: read`.",
+            dialects: ["GitHub Actions workflow"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R107",
+            ruleNumber: 107,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-secret-scan-contents-read",
+        },
+        messages: {
+            missingContentsRead: "Job '{{jobId}}' runs a secret scanner and should grant `contents: read`.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-secret-scan-contents-read.js.map

package/dist/rules/require-secret-scan-contents-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-secret-scan-contents-read.js","sourceRoot":"","sources":["../../src/rules/require-secret-scan-contents-read.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE;;;GAGG;AACH,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,IAAI,IAAI,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,IACI,6BAA6B,CACzB,IAAI,EACJ,IAAI,CAAC,GAAG,EACR,UAAU,EACV,MAAM,CACT,EACH,CAAC;wBACC,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;wBAC5B,SAAS,EAAE,qBAAqB;wBAChC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAA8B;qBAChD,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,iCAAiC;aACpC;YACD,WAAW,EACP,8DAA8D;YAClE,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,GAAG;YACf,GAAG,EAAE,0GAA0G;SAClH;QACD,QAAQ,EAAE;YACN,mBAAmB,EACf,0EAA0E;SACjF;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-secret-scan-fetch-depth-zero.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require secret scanning workflows to checkout full history.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for fetch-depth zero requirements on secret scanners. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-secret-scan-fetch-depth-zero.d.ts.map

package/dist/rules/require-secret-scan-fetch-depth-zero.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-secret-scan-fetch-depth-zero.d.ts","sourceRoot":"","sources":["../../src/rules/require-secret-scan-fetch-depth-zero.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAgBnC,gFAAgF;AAChF,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAqGhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-secret-scan-fetch-depth-zero.js

@@ -0,0 +1,77 @@
+import { getSecretScanningActionSteps } from "../_internal/secret-scanning-workflow.js";
+import { getMappingPair, getMappingValueAsMapping, getMappingValueAsSequence, getScalarNumberValue, getScalarStringValue, getWorkflowRoot, unwrapYamlValue, } from "../_internal/workflow-yaml.js";
+const isCheckoutReference = (usesReference) => usesReference.trim().startsWith("actions/checkout@");
+/** Rule implementation for fetch-depth zero requirements on secret scanners. */
+const rule = {
+    create(context) {
+        return {
+            Program() {
+                const root = getWorkflowRoot(context);
+                if (root === null) {
+                    return;
+                }
+                for (const scanStep of getSecretScanningActionSteps(root)) {
+                    const stepsSequence = getMappingValueAsSequence(scanStep.job.mapping, "steps");
+                    if (stepsSequence === null) {
+                        continue;
+                    }
+                    let hasCompliantCheckout = false;
+                    for (const entry of stepsSequence.entries) {
+                        const stepMapping = unwrapYamlValue(entry);
+                        if (stepMapping?.type !== "YAMLMapping") {
+                            continue;
+                        }
+                        const usesReference = getScalarStringValue(getMappingPair(stepMapping, "uses")?.value ?? null);
+                        if (usesReference === null ||
+                            !isCheckoutReference(usesReference)) {
+                            continue;
+                        }
+                        const withMapping = getMappingValueAsMapping(stepMapping, "with");
+                        const fetchDepthPair = withMapping === null
+                            ? null
+                            : getMappingPair(withMapping, "fetch-depth");
+                        const fetchDepthNumber = getScalarNumberValue(fetchDepthPair?.value ?? null);
+                        const fetchDepthString = getScalarStringValue(fetchDepthPair?.value ?? null)?.trim();
+                        if (fetchDepthNumber === 0 ||
+                            fetchDepthString === "0") {
+                            hasCompliantCheckout = true;
+                            break;
+                        }
+                    }
+                    if (hasCompliantCheckout) {
+                        continue;
+                    }
+                    context.report({
+                        data: { jobId: scanStep.job.id },
+                        messageId: "missingFetchDepthZero",
+                        node: scanStep.job.idNode,
+                    });
+                }
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.security",
+            ],
+            description: "require secret scanning workflows to checkout full history with `fetch-depth: 0`.",
+            dialects: ["GitHub Actions workflow"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R105",
+            ruleNumber: 105,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-secret-scan-fetch-depth-zero",
+        },
+        messages: {
+            missingFetchDepthZero: "Job '{{jobId}}' runs a secret scanner and should checkout repository history with `fetch-depth: 0`.",
+        },
+        schema: [],
+        type: "problem",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-secret-scan-fetch-depth-zero.js.map

package/dist/rules/require-secret-scan-fetch-depth-zero.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-secret-scan-fetch-depth-zero.js","sourceRoot":"","sources":["../../src/rules/require-secret-scan-fetch-depth-zero.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EACH,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,mBAAmB,GAAG,CAAC,aAAqB,EAAW,EAAE,CAC3D,aAAa,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;AAEzD,gFAAgF;AAChF,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO;gBACH,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,KAAK,MAAM,QAAQ,IAAI,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,MAAM,aAAa,GAAG,yBAAyB,CAC3C,QAAQ,CAAC,GAAG,CAAC,OAAO,EACpB,OAAO,CACV,CAAC;oBAEF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;wBACzB,SAAS;oBACb,CAAC;oBAED,IAAI,oBAAoB,GAAG,KAAK,CAAC;oBAEjC,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;wBACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;wBAE3C,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;4BACtC,SAAS;wBACb,CAAC;wBAED,MAAM,aAAa,GAAG,oBAAoB,CACtC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,CACrD,CAAC;wBAEF,IACI,aAAa,KAAK,IAAI;4BACtB,CAAC,mBAAmB,CAAC,aAAa,CAAC,EACrC,CAAC;4BACC,SAAS;wBACb,CAAC;wBAED,MAAM,WAAW,GAAG,wBAAwB,CACxC,WAAW,EACX,MAAM,CACT,CAAC;wBACF,MAAM,cAAc,GAChB,WAAW,KAAK,IAAI;4BAChB,CAAC,CAAC,IAAI;4BACN,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;wBACrD,MAAM,gBAAgB,GAAG,oBAAoB,CACzC,cAAc,EAAE,KAAK,IAAI,IAAI,CAChC,CAAC;wBACF,MAAM,gBAAgB,GAAG,oBAAoB,CACzC,cAAc,EAAE,KAAK,IAAI,IAAI,CAChC,EAAE,IAAI,EAAE,CAAC;wBAEV,IACI,gBAAgB,KAAK,CAAC;4BACtB,gBAAgB,KAAK,GAAG,EAC1B,CAAC;4BACC,oBAAoB,GAAG,IAAI,CAAC;4BAC5B,MAAM;wBACV,CAAC;oBACL,CAAC;oBAED,IAAI,oBAAoB,EAAE,CAAC;wBACvB,SAAS;oBACb,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC;wBACX,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE;wBAChC,SAAS,EAAE,uBAAuB;wBAClC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,MAA8B;qBACpD,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,iCAAiC;aACpC;YACD,WAAW,EACP,mFAAmF;YACvF,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,GAAG;YACf,GAAG,EAAE,6GAA6G;SACrH;QACD,QAAQ,EAAE;YACN,qBAAqB,EACjB,qGAAqG;SAC5G;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,SAAS;KACG;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-secret-scan-schedule.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * Require secret scanning workflows to run on a schedule.
+ */
+import type { Rule } from "eslint";
+/** Rule implementation for requiring scheduled secret scanning runs. */
+declare const rule: Rule.RuleModule;
+export default rule;
+//# sourceMappingURL=require-secret-scan-schedule.d.ts.map

package/dist/rules/require-secret-scan-schedule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-secret-scan-schedule.d.ts","sourceRoot":"","sources":["../../src/rules/require-secret-scan-schedule.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAQnC,wEAAwE;AACxE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA6ChB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-secret-scan-schedule.js

@@ -0,0 +1,46 @@
+import { hasSecretScanningAction } from "../_internal/secret-scanning-workflow.js";
+import { getWorkflowEventNames, getWorkflowRoot, } from "../_internal/workflow-yaml.js";
+/** Rule implementation for requiring scheduled secret scanning runs. */
+const rule = {
+    create(context) {
+        return {
+            Program(node) {
+                const root = getWorkflowRoot(context);
+                if (root === null || !hasSecretScanningAction(root)) {
+                    return;
+                }
+                if (getWorkflowEventNames(root).has("schedule")) {
+                    return;
+                }
+                context.report({
+                    messageId: "missingScheduleTrigger",
+                    node: node,
+                });
+            },
+        };
+    },
+    meta: {
+        deprecated: false,
+        docs: {
+            configs: [
+                "github-actions.configs.all",
+                "github-actions.configs.security",
+            ],
+            description: "require secret scanning workflows to include a scheduled trigger.",
+            dialects: ["GitHub Actions workflow"],
+            frozen: false,
+            recommended: true,
+            requiresTypeChecking: false,
+            ruleId: "R106",
+            ruleNumber: 106,
+            url: "https://nick2bad4u.github.io/eslint-plugin-github-actions-2/docs/rules/require-secret-scan-schedule",
+        },
+        messages: {
+            missingScheduleTrigger: "Secret scanning workflows should include a `schedule` trigger for periodic scanning.",
+        },
+        schema: [],
+        type: "suggestion",
+    },
+};
+export default rule;
+//# sourceMappingURL=require-secret-scan-schedule.js.map

package/dist/rules/require-secret-scan-schedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-secret-scan-schedule.js","sourceRoot":"","sources":["../../src/rules/require-secret-scan-schedule.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EACH,qBAAqB,EACrB,eAAe,GAClB,MAAM,+BAA+B,CAAC;AAEvC,wEAAwE;AACxE,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO,CAAC,IAAI;gBACR,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBAEtC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClD,OAAO;gBACX,CAAC;gBAED,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9C,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,MAAM,CAAC;oBACX,SAAS,EAAE,wBAAwB;oBACnC,IAAI,EAAE,IAA4B;iBACrC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,4BAA4B;gBAC5B,iCAAiC;aACpC;YACD,WAAW,EACP,mEAAmE;YACvE,QAAQ,EAAE,CAAC,yBAAyB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,GAAG;YACf,GAAG,EAAE,qGAAqG;SAC7G;QACD,QAAQ,EAAE;YACN,sBAAsB,EAClB,sFAAsF;SAC7F;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-template-categories.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"require-template-categories.d.ts","sourceRoot":"","sources":["../../src/rules/require-template-categories.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AASnC,6DAA6D;AAC7D,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA8DhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"require-template-categories.d.ts","sourceRoot":"","sources":["../../src/rules/require-template-categories.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AASnC,6DAA6D;AAC7D,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAiEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-template-categories.js

@@ -31,6 +31,7 @@ const rule = {
         };
     },
     meta: {
+        deprecated: false,
         docs: {
             configs: [
                 "github-actions.configs.workflowTemplateProperties",
@@ -38,6 +39,8 @@ const rule = {
                 "github-actions.configs.all",
             ],
             description: "require non-empty `categories` in workflow-template metadata.",
+            dialects: ["GitHub Actions workflow template metadata"],
+            frozen: false,
             recommended: true,
             requiresTypeChecking: false,
             ruleId: "R057",

package/dist/rules/require-template-categories.js.map

@@ -1 +1 @@
-{"version":3,"file":"require-template-categories.js","sourceRoot":"","sources":["../../src/rules/require-template-categories.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EACH,iCAAiC,EACjC,iCAAiC,GACpC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,6DAA6D;AAC7D,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO,CAAC,IAAI;gBACR,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtD,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;gBAExD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,kBAAkB,GAAG,yBAAyB,CAChD,IAAI,EACJ,YAAY,CACf,CAAC;gBAEF,IACI,kBAAkB,KAAK,IAAI;oBAC3B,kBAAkB,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,YAAY,GACd,iCAAiC,CAAC,IAAI,EAAE,MAAM,CAAC;oBAC/C,oBAAoB,CAAC;gBAEzB,OAAO,CAAC,MAAM,CAAC;oBACX,IAAI,EAAE;wBACF,YAAY;qBACf;oBACD,SAAS,EAAE,mBAAmB;oBAC9B,IAAI,EAAE,IAA4B;iBACrC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,mDAAmD;gBACnD,0CAA0C;gBAC1C,4BAA4B;aAC/B;YACD,WAAW,EACP,+DAA+D;YACnE,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,oGAAoG;SAC5G;QACD,QAAQ,EAAE;YACN,iBAAiB,EACb,4FAA4F;SACnG;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"require-template-categories.js","sourceRoot":"","sources":["../../src/rules/require-template-categories.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EACH,iCAAiC,EACjC,iCAAiC,GACpC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,6DAA6D;AAC7D,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO,CAAC,IAAI;gBACR,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtD,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;gBAExD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,kBAAkB,GAAG,yBAAyB,CAChD,IAAI,EACJ,YAAY,CACf,CAAC;gBAEF,IACI,kBAAkB,KAAK,IAAI;oBAC3B,kBAAkB,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,YAAY,GACd,iCAAiC,CAAC,IAAI,EAAE,MAAM,CAAC;oBAC/C,oBAAoB,CAAC;gBAEzB,OAAO,CAAC,MAAM,CAAC;oBACX,IAAI,EAAE;wBACF,YAAY;qBACf;oBACD,SAAS,EAAE,mBAAmB;oBAC9B,IAAI,EAAE,IAA4B;iBACrC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,mDAAmD;gBACnD,0CAA0C;gBAC1C,4BAA4B;aAC/B;YACD,WAAW,EACP,+DAA+D;YACnE,QAAQ,EAAE,CAAC,2CAA2C,CAAC;YACvD,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,oGAAoG;SAC5G;QACD,QAAQ,EAAE;YACN,iBAAiB,EACb,4FAA4F;SACnG;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-template-file-patterns.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"require-template-file-patterns.d.ts","sourceRoot":"","sources":["../../src/rules/require-template-file-patterns.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AASnC,0EAA0E;AAC1E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA8DhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"require-template-file-patterns.d.ts","sourceRoot":"","sources":["../../src/rules/require-template-file-patterns.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AASnC,0EAA0E;AAC1E,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAiEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-template-file-patterns.js

@@ -31,6 +31,7 @@ const rule = {
         };
     },
     meta: {
+        deprecated: false,
         docs: {
             configs: [
                 "github-actions.configs.workflowTemplateProperties",
@@ -38,6 +39,8 @@ const rule = {
                 "github-actions.configs.all",
             ],
             description: "require non-empty `filePatterns` in workflow-template metadata.",
+            dialects: ["GitHub Actions workflow template metadata"],
+            frozen: false,
             recommended: true,
             requiresTypeChecking: false,
             ruleId: "R058",

package/dist/rules/require-template-file-patterns.js.map

@@ -1 +1 @@
-{"version":3,"file":"require-template-file-patterns.js","sourceRoot":"","sources":["../../src/rules/require-template-file-patterns.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EACH,iCAAiC,EACjC,iCAAiC,GACpC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,0EAA0E;AAC1E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO,CAAC,IAAI;gBACR,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtD,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;gBAExD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,oBAAoB,GAAG,yBAAyB,CAClD,IAAI,EACJ,cAAc,CACjB,CAAC;gBAEF,IACI,oBAAoB,KAAK,IAAI;oBAC7B,oBAAoB,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EACzC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,YAAY,GACd,iCAAiC,CAAC,IAAI,EAAE,MAAM,CAAC;oBAC/C,oBAAoB,CAAC;gBAEzB,OAAO,CAAC,MAAM,CAAC;oBACX,IAAI,EAAE;wBACF,YAAY;qBACf;oBACD,SAAS,EAAE,qBAAqB;oBAChC,IAAI,EAAE,IAA4B;iBACrC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,mDAAmD;gBACnD,0CAA0C;gBAC1C,4BAA4B;aAC/B;YACD,WAAW,EACP,iEAAiE;YACrE,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,uGAAuG;SAC/G;QACD,QAAQ,EAAE;YACN,mBAAmB,EACf,kGAAkG;SACzG;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"require-template-file-patterns.js","sourceRoot":"","sources":["../../src/rules/require-template-file-patterns.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EACH,iCAAiC,EACjC,iCAAiC,GACpC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,0EAA0E;AAC1E,MAAM,IAAI,GAAoB;IAC1B,MAAM,CAAC,OAAO;QACV,OAAO;YACH,OAAO,CAAC,IAAI;gBACR,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtD,OAAO;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;gBAExD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChB,OAAO;gBACX,CAAC;gBAED,MAAM,oBAAoB,GAAG,yBAAyB,CAClD,IAAI,EACJ,cAAc,CACjB,CAAC;gBAEF,IACI,oBAAoB,KAAK,IAAI;oBAC7B,oBAAoB,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EACzC,CAAC;oBACC,OAAO;gBACX,CAAC;gBAED,MAAM,YAAY,GACd,iCAAiC,CAAC,IAAI,EAAE,MAAM,CAAC;oBAC/C,oBAAoB,CAAC;gBAEzB,OAAO,CAAC,MAAM,CAAC;oBACX,IAAI,EAAE;wBACF,YAAY;qBACf;oBACD,SAAS,EAAE,qBAAqB;oBAChC,IAAI,EAAE,IAA4B;iBACrC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;IACN,CAAC;IACD,IAAI,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE;YACF,OAAO,EAAE;gBACL,mDAAmD;gBACnD,0CAA0C;gBAC1C,4BAA4B;aAC/B;YACD,WAAW,EACP,iEAAiE;YACrE,QAAQ,EAAE,CAAC,2CAA2C,CAAC;YACvD,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,KAAK;YAC3B,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,uGAAuG;SAC/G;QACD,QAAQ,EAAE;YACN,mBAAmB,EACf,kGAAkG;SACzG;QACD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,YAAY;KACA;CACzB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/require-template-icon-file-exists.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"require-template-icon-file-exists.d.ts","sourceRoot":"","sources":["../../src/rules/require-template-icon-file-exists.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAWnC,mEAAmE;AACnE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAqEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"require-template-icon-file-exists.d.ts","sourceRoot":"","sources":["../../src/rules/require-template-icon-file-exists.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAWnC,mEAAmE;AACnE,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAwEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}