tutanus 0.12.0

package/dist/analysts/github-actions/reports/generator-report-github-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator-report-github-actions.js","sourceRoot":"","sources":["../../../../src/analysts/github-actions/reports/generator-report-github-actions.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA2B7B,MAAM,UAAU,kBAAkB,CAAC,KAAkC;IACnE,MAAM,SAAS,GAAG;QAChB,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,MAAM,EAAE,OAAO;QACf,GAAG,KAAK;KACT,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,KAAkC,EAAE,MAG1E;IACC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,uCAAuC,CAAC;IACzE,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,MAAM,CAAC,IAAI,CAAC,yBAAyB,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACzC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzB,MAAM,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,UAAU,QAAQ,CAAC,CAAC;IACzD,MAAM,CAAC,IAAI,CAAC,0BAA0B,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;IAChE,MAAM,CAAC,IAAI,CAAC,4BAA4B,KAAK,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAClD,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7B,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,KAAK,UAAU,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,MAAM,EAAE,eAAe,KAAK,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACrC,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC;YACzC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,IAAI,cAAc,CAAC;YAC/C,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC9P,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,GAAG,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC,OAAO,QAAQ,KAAK,MAAM,KAAK,MAAM,IAAI,MAAM,GAAG,IAAI,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,WAAW,CAAC,MAAM,eAAe,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,iCAAiC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAkC,EAAE,MAEtE;IACC,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,uCAAuC,CAAC;IACzE,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,OAAO;;;;;WAKE,UAAU,CAAC,MAAM,CAAC;;;;;;;;;gEASmC,UAAU;;;;;;;;;;;;;;;;;;;;;iBAqBzD,UAAU,CAAC,MAAM,CAAC;;yCAEM,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC,6BAA6B,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,8BAA8B,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;;;;iCAIzK,KAAK,CAAC,UAAU;;;;;;;;6BAQpB,KAAK,CAAC,cAAc;;;;6BAIpB,KAAK,CAAC,WAAW,CAAC,MAAM;;QAE7C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;;6BAE3C,UAAU,CAAC,GAAG,CAAC;6BACf,KAAK;aACrB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;;;;;;;UAOb,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAC/B,MAAM,WAAW,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,OAAO,WAAW,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,WAAW,sBAAsB,EAAE,CAAC,KAAK,gBAAgB,EAAE,CAAC,WAAW,YAAY,CAAC;IACpJ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;;;;;;;;UAQH,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;;sBAEtC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;gBACpC,UAAU,CAAC,KAAK,IAAI,GAAG;yCACE,UAAU,CAAC,KAAK,IAAI,MAAM,KAAK,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;gBACtG,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;gBACjC,UAAU,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC;cACvC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;;;MAGlB,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,6DAA6D,KAAK,CAAC,WAAW,CAAC,MAAM,mBAAmB,CAAC,CAAC,CAAC,EAAE;;;wCAG5G,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;;;;QAIxD,CAAC;AACT,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAkC;IAClE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC/D,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;QACvP,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AACD,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAChI,CAAC;AACD,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAkC,EAAE,MAAuB;IAC9F,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE;QACrB,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,KAAK,MAAM;gBACT,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACnC,KAAK,UAAU;gBACb,OAAO,sBAAsB,CAAC,KAAK,EAAE;oBACnC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,eAAe,EAAE,MAAM,CAAC,eAAe;iBACxC,CAAC,CAAC;YACL,KAAK,MAAM;gBACT,OAAO,kBAAkB,CAAC,KAAK,EAAE;oBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC,CAAC;YACL,KAAK,KAAK;gBACR,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAClC;gBACE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE;QAChB,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AACD,MAAM,UAAU,2BAA2B,CAAC,WAAyB;IACnE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,WAAyB;IAC7D,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,IAAI,cAAc,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,WAAyB,EAAE,eAAuB,EAAE,cAAsB,EAAE,SAIjH;IACA,MAAM,MAAM,GAAG,SAAS,IAAI,EAAE,CAAC;IAC/B,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,EAAE,CAAC,GAAG,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvL,OAAO;QACL,eAAe;QACf,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,cAAc;QACd,UAAU;QACV,WAAW;QACX,mBAAmB,EAAE,2BAA2B,CAAC,WAAW,CAAC;QAC7D,aAAa,EAAE,qBAAqB,CAAC,WAAW,CAAC;QACjD,SAAS,EAAE,MAAM;QACjB,cAAc;KACf,CAAC;AACJ,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [GRAFICO] Gerador de Relatórios Multi-Formato para GitHub Actions\n *\n * Suporta: JSON, Markdown, HTML, CSV\n */\n\nimport { messages } from '@core/messages';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport type { Ocorrencia } from '@';\n\nexport type FormatoRelatorio = 'json' | 'markdown' | 'html' | 'csv';\nexport interface DadosRelatorioGithubActions {\n  nomeRepositorio: string;\n  dataAnalise: string;\n  totalWorkflows: number;\n  scoreGeral: number;\n  ocorrencias: Ocorrencia[];\n  resumoPorSeveridade: Record<string, number>;\n  resumoPorTipo: Record<string, number>;\n  workflows: Array<{\n    nome: string;\n    score: number;\n    ocorrencias: number;\n  }>;\n  tempoAnaliseMs: number;\n}\nexport interface OpcoesRelatorio {\n  formato: FormatoRelatorio;\n  output: string;\n  titulo?: string;\n  incluirDetalhes?: boolean;\n  filtrarSeveridade?: string[];\n}\nexport function gerarRelatorioJson(dados: DadosRelatorioGithubActions): string {\n  const relatorio = {\n    $schema: 'tutanus://schemas/github-actions-report/v1',\n    geradoEm: new Date().toISOString(),\n    versao: '0.6.0',\n    ...dados\n  };\n  return JSON.stringify(relatorio, null, 2);\n}\nexport function gerarRelatorioMarkdown(dados: DadosRelatorioGithubActions, opcoes?: {\n  titulo?: string;\n  incluirDetalhes?: boolean;\n}): string {\n  const linhas: string[] = [];\n  const titulo = opcoes?.titulo || 'Relatório de Análise - GitHub Actions';\n  linhas.push(`# ${titulo}`);\n  linhas.push('');\n  linhas.push(`**Repositório:** ${dados.nomeRepositorio}`);\n  linhas.push(`**Data:** ${dados.dataAnalise}`);\n  linhas.push(`**Tempo de Análise:** ${dados.tempoAnaliseMs}ms`);\n  linhas.push('');\n  linhas.push('## [GRAFICO] Resumo Geral');\n  linhas.push('');\n  linhas.push(`| Métrica | Valor |`);\n  linhas.push(`|---|---|`);\n  linhas.push(`| Score Geral | ${dados.scoreGeral}/100 |`);\n  linhas.push(`| Total de Workflows | ${dados.totalWorkflows} |`);\n  linhas.push(`| Total de Ocorrências | ${dados.ocorrencias.length} |`);\n  linhas.push('');\n  linhas.push('## 🔴 Severidade');\n  linhas.push('');\n  linhas.push(`| Severidade | Quantidade |`);\n  linhas.push(`|---|---|`);\n  for (const [sev, count] of Object.entries(dados.resumoPorSeveridade)) {\n    const icon = sev === 'erro' ? '🔴' : sev === 'aviso' ? '🟡' : '🔵';\n    linhas.push(`| ${icon} ${sev} | ${count} |`);\n  }\n  linhas.push('');\n  linhas.push('## 📋 Workflows Analisados');\n  linhas.push('');\n  linhas.push(`| Workflow | Score | Ocorrências |`);\n  linhas.push(`|---|---|---|`);\n  for (const wf of dados.workflows) {\n    const scoreIcon = wf.score >= 80 ? '[OK]' : wf.score >= 50 ? '[AVISO]' : '[ERRO]';\n    linhas.push(`| ${scoreIcon} ${wf.nome} | ${wf.score}/100 | ${wf.ocorrencias} |`);\n  }\n  linhas.push('');\n  if (opcoes?.incluirDetalhes !== false && dados.ocorrencias.length > 0) {\n    linhas.push('## [BUSCA] Ocorrências Detalhadas');\n    linhas.push('');\n    linhas.push(`| Arquivo | Linha | Severidade | Tipo | Mensagem |`);\n    linhas.push(`|---|---|---|---|---|`);\n    for (const ocorrencia of dados.ocorrencias.slice(0, 200)) {\n      const nivel = ocorrencia.nivel || 'info';\n      const tipo = ocorrencia.tipo || 'desconhecido';\n      const msg = (ocorrencia.mensagem || '').replace(/\\\\/g, '\\\\\\\\').replace(/\\|/g, '\\\\|').replace(/\\n/g, ' ').replace(/\\r/g, ' ').replace(/\\*/g, '\\\\*').replace(/_/g, '\\\\_').replace(/\\[/g, '\\\\[').replace(/\\]/g, '\\\\]').replace(/</g, '\\\\<').replace(/>/g, '\\\\>');\n      const linha = ocorrencia.linha || '-';\n      linhas.push(`| \\`${ocorrencia.relPath}\\` | ${linha} | ${nivel} | ${tipo} | ${msg} |`);\n    }\n    if (dados.ocorrencias.length > 200) {\n      linhas.push('');\n      linhas.push(`> Mostrando 200 de ${dados.ocorrencias.length} ocorrências.`);\n    }\n    linhas.push('');\n  }\n  linhas.push('---');\n  linhas.push('');\n  linhas.push(`*Gerado por Tutanus v0.6.0 em ${new Date().toISOString()}*`);\n  return linhas.join('\\n');\n}\nexport function gerarRelatorioHtml(dados: DadosRelatorioGithubActions, opcoes?: {\n  titulo?: string;\n}): string {\n  const titulo = opcoes?.titulo || 'Relatório de Análise - GitHub Actions';\n  const scoreColor = dados.scoreGeral >= 80 ? '#10b981' : dados.scoreGeral >= 50 ? '#f59e0b' : '#ef4444';\n  return `<!DOCTYPE html>\n<html lang=\"pt-BR\">\n<head>\n  <meta charset=\"UTF-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n  <title>${escapeHtml(titulo)}</title>\n  <style>\n    * { margin: 0; padding: 0; box-sizing: border-box; }\n    body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; background: #0d1117; color: #c9d1d9; padding: 2rem; }\n    .container { max-width: 1200px; margin: 0 auto; }\n    h1 { color: #58a6ff; margin-bottom: 0.5rem; }\n    h2 { color: #58a6ff; margin: 2rem 0 1rem; border-bottom: 1px solid #21262d; padding-bottom: 0.5rem; }\n    .meta { color: #8b949e; margin-bottom: 2rem; }\n    .score-card { background: #161b22; border: 1px solid #30363d; border-radius: 12px; padding: 2rem; text-align: center; margin-bottom: 2rem; }\n    .score-value { font-size: 4rem; font-weight: bold; color: ${scoreColor}; }\n    .score-label { color: #8b949e; font-size: 1.2rem; }\n    table { width: 100%; border-collapse: collapse; margin: 1rem 0; }\n    th { background: #161b22; color: #58a6ff; padding: 0.75rem 1rem; text-align: left; border-bottom: 2px solid #30363d; }\n    td { padding: 0.75rem 1rem; border-bottom: 1px solid #21262d; }\n    tr:hover { background: #161b22; }\n    .badge { padding: 0.25rem 0.5rem; border-radius: 12px; font-size: 0.85rem; font-weight: 600; }\n    .badge-erro { background: rgba(239,68,68,0.2); color: #ef4444; }\n    .badge-aviso { background: rgba(245,158,11,0.2); color: #f59e0b; }\n    .badge-info { background: rgba(56,139,253,0.2); color: #388bfd; }\n    .badge-sucesso { background: rgba(16,185,129,0.2); color: #10b981; }\n    .summary-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 1rem; margin: 1rem 0; }\n    .summary-item { background: #161b22; border: 1px solid #30363d; border-radius: 8px; padding: 1rem; }\n    .summary-item .label { color: #8b949e; font-size: 0.85rem; }\n    .summary-item .value { font-size: 1.5rem; font-weight: bold; color: #58a6ff; }\n    .footer { margin-top: 3rem; padding-top: 1rem; border-top: 1px solid #21262d; color: #8b949e; font-size: 0.85rem; text-align: center; }\n    code { background: #161b22; padding: 0.2rem 0.4rem; border-radius: 4px; font-family: 'JetBrains Mono', monospace; font-size: 0.9em; }\n  </style>\n</head>\n<body>\n  <div class=\"container\">\n    <h1>[FOGO] ${escapeHtml(titulo)}</h1>\n    <div class=\"meta\">\n      <p><strong>Repositório:</strong> ${escapeHtml(dados.nomeRepositorio)} | <strong>Data:</strong> ${escapeHtml(dados.dataAnalise)} | <strong>Tempo:</strong> ${escapeHtml(String(dados.tempoAnaliseMs))}ms</p>\n    </div>\n\n    <div class=\"score-card\">\n      <div class=\"score-value\">${dados.scoreGeral}</div>\n      <div class=\"score-label\">Score Geral (0-100)</div>\n    </div>\n\n    <h2>[GRAFICO] Resumo</h2>\n    <div class=\"summary-grid\">\n      <div class=\"summary-item\">\n        <div class=\"label\">Workflows</div>\n        <div class=\"value\">${dados.totalWorkflows}</div>\n      </div>\n      <div class=\"summary-item\">\n        <div class=\"label\">Ocorrências</div>\n        <div class=\"value\">${dados.ocorrencias.length}</div>\n      </div>\n      ${Object.entries(dados.resumoPorSeveridade).map(([sev, count]) => `\n      <div class=\"summary-item\">\n        <div class=\"label\">${escapeHtml(sev)}</div>\n        <div class=\"value\">${count}</div>\n      </div>`).join('')}\n    </div>\n\n    <h2>📋 Workflows</h2>\n    <table>\n      <thead><tr><th>Workflow</th><th>Score</th><th>Ocorrências</th></tr></thead>\n      <tbody>\n        ${dados.workflows.map(wf => {\n    const scoreColor2 = wf.score >= 80 ? '#10b981' : wf.score >= 50 ? '#f59e0b' : '#ef4444';\n    return `<tr><td>${escapeHtml(wf.nome)}</td><td style=\"color:${scoreColor2};font-weight:bold\">${wf.score}/100</td><td>${wf.ocorrencias}</td></tr>`;\n  }).join('')}\n      </tbody>\n    </table>\n\n    <h2>[BUSCA] Ocorrências</h2>\n    <table>\n      <thead><tr><th>Arquivo</th><th>Linha</th><th>Severidade</th><th>Tipo</th><th>Mensagem</th></tr></thead>\n      <tbody>\n        ${dados.ocorrencias.slice(0, 200).map(ocorrencia => `\n        <tr>\n          <td><code>${escapeHtml(ocorrencia.relPath)}</code></td>\n          <td>${ocorrencia.linha || '-'}</td>\n          <td><span class=\"badge badge-${ocorrencia.nivel || 'info'}\">${escapeHtml(String(ocorrencia.nivel || 'info'))}</span></td>\n          <td>${escapeHtml(ocorrencia.tipo || '')}</td>\n          <td>${escapeHtml(ocorrencia.mensagem || '')}</td>\n        </tr>`).join('')}\n      </tbody>\n    </table>\n    ${dados.ocorrencias.length > 200 ? `<p style=\"color:#8b949e;margin-top:1rem\">Mostrando 200 de ${dados.ocorrencias.length} ocorrências.</p>` : ''}\n\n    <div class=\"footer\">\n      <p>Gerado por Tutanus v0.6.0 em ${new Date().toISOString()}</p>\n    </div>\n  </div>\n</body>\n</html>`;\n}\nexport function gerarRelatorioCsv(dados: DadosRelatorioGithubActions): string {\n  const linhas: string[] = [];\n  linhas.push('Arquivo,Linha,Severidade,Tipo,Mensagem,Sugestao');\n  for (const ocorrencia of dados.ocorrencias) {\n    const campos = [csvEscape(ocorrencia.relPath), csvEscape(String(ocorrencia.linha || '')), csvEscape(String(ocorrencia.nivel || 'info')), csvEscape(ocorrencia.tipo || ''), csvEscape(ocorrencia.mensagem || ''), csvEscape(ocorrencia.sugestao || '')];\n    linhas.push(campos.join(','));\n  }\n  return linhas.join('\\n');\n}\nfunction escapeHtml(str: string): string {\n  return str.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/\"/g, '&quot;').replace(/'/g, '&#039;');\n}\nfunction csvEscape(str: string): string {\n  if (str.includes(',') || str.includes('\"') || str.includes('\\n')) {\n    return `\"${str.replace(/\"/g, '\"\"')}\"`;\n  }\n  return str;\n}\nexport async function gerarRelatorio(dados: DadosRelatorioGithubActions, opcoes: OpcoesRelatorio): Promise<string> {\n  const conteudo = (() => {\n    switch (opcoes.formato) {\n      case 'json':\n        return gerarRelatorioJson(dados);\n      case 'markdown':\n        return gerarRelatorioMarkdown(dados, {\n          titulo: opcoes.titulo,\n          incluirDetalhes: opcoes.incluirDetalhes\n        });\n      case 'html':\n        return gerarRelatorioHtml(dados, {\n          titulo: opcoes.titulo\n        });\n      case 'csv':\n        return gerarRelatorioCsv(dados);\n      default:\n        throw new Error(messages.ExcecoesMensagens.formatoNaoSuportado(opcoes.formato));\n    }\n  })();\n  const dir = path.dirname(opcoes.output);\n  fs.mkdirSync(dir, {\n    recursive: true\n  });\n  fs.writeFileSync(opcoes.output, conteudo, 'utf-8');\n  return opcoes.output;\n}\nexport function calcularResumoPorSeveridade(ocorrencias: Ocorrencia[]): Record<string, number> {\n  const resumo: Record<string, number> = {};\n  for (const ocorrencia of ocorrencias) {\n    const nivel = String(ocorrencia.nivel || 'info');\n    resumo[nivel] = (resumo[nivel] || 0) + 1;\n  }\n  return resumo;\n}\nexport function calcularResumoPorTipo(ocorrencias: Ocorrencia[]): Record<string, number> {\n  const resumo: Record<string, number> = {};\n  for (const ocorrencia of ocorrencias) {\n    const tipo = ocorrencia.tipo || 'desconhecido';\n    resumo[tipo] = (resumo[tipo] || 0) + 1;\n  }\n  return resumo;\n}\nexport function prepararDadosRelatorio(ocorrencias: Ocorrencia[], nomeRepositorio: string, tempoAnaliseMs: number, workflows?: Array<{\n  nome: string;\n  score: number;\n  ocorrencias: number;\n}>): DadosRelatorioGithubActions {\n  const wfList = workflows || [];\n  const totalWorkflows = wfList.length || 1;\n  const scoreGeral = wfList.length > 0 ? Math.round(wfList.reduce((sum, dimensaoLargura) => sum + dimensaoLargura.score, 0) / wfList.length) : Math.max(0, 100 - ocorrencias.length * 5);\n  return {\n    nomeRepositorio,\n    dataAnalise: new Date().toISOString(),\n    totalWorkflows,\n    scoreGeral,\n    ocorrencias,\n    resumoPorSeveridade: calcularResumoPorSeveridade(ocorrencias),\n    resumoPorTipo: calcularResumoPorTipo(ocorrencias),\n    workflows: wfList,\n    tempoAnaliseMs\n  };\n}"]}

package/dist/analysts/github-actions/reports/index.d.ts

@@ -0,0 +1,2 @@
+export * from './generator-report-github-actions.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/github-actions/reports/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/github-actions/reports/index.ts"],"names":[],"mappings":"AACA,cAAc,sCAAsC,CAAC"}

package/dist/analysts/github-actions/reports/index.js

@@ -0,0 +1,2 @@
+export * from './generator-report-github-actions.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/github-actions/reports/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/github-actions/reports/index.ts"],"names":[],"mappings":"AACA,cAAc,sCAAsC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './generator-report-github-actions.js';\n"]}

package/dist/analysts/github-actions/scorers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './scorer-workflow.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/github-actions/scorers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/github-actions/scorers/index.ts"],"names":[],"mappings":"AACA,cAAc,sBAAsB,CAAC"}

package/dist/analysts/github-actions/scorers/index.js

@@ -0,0 +1,2 @@
+export * from './scorer-workflow.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/github-actions/scorers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/github-actions/scorers/index.ts"],"names":[],"mappings":"AACA,cAAc,sBAAsB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './scorer-workflow.js';\n"]}

package/dist/analysts/github-actions/scorers/scorer-workflow.d.ts

@@ -0,0 +1,15 @@
+export interface WorkflowScoreResult {
+    score: number;
+    maxScore: number;
+    percentage: number;
+    issues: string[];
+    strengths: string[];
+}
+export declare function pontuarWorkflow(src: string, _relPath: string): WorkflowScoreResult;
+export declare const pontuadorWorkflow: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    pontuar: typeof pontuarWorkflow;
+};
+//# sourceMappingURL=scorer-workflow.d.ts.map

package/dist/analysts/github-actions/scorers/scorer-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-workflow.d.ts","sourceRoot":"","sources":["../../../../src/analysts/github-actions/scorers/scorer-workflow.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AACD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,mBAAmB,CAuElF;AACD,eAAO,MAAM,iBAAiB;;;;;CAK7B,CAAC"}

package/dist/analysts/github-actions/scorers/scorer-workflow.js

@@ -0,0 +1,74 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+export function pontuarWorkflow(src, _relPath) {
+    let score = 0;
+    const maxScore = 100;
+    const issues = [];
+    const strengths = [];
+    const _linhas = splitLines(src);
+    const srcCompleto = src;
+    const hardcodedSecrets = (srcCompleto.match(/\b(KEY|TOKEN|SECRET|PASSWORD)\b.*[:=]\s*['"][^'"]+['"]/gi) || []).filter(linha => !/\$\{\{/.test(linha)).length;
+    if (hardcodedSecrets === 0) {
+        score += 25;
+        strengths.push('Sem secrets hardcoded');
+    }
+    else {
+        issues.push(`${hardcodedSecrets} secret(s) hardcoded`);
+    }
+    const usesLines = srcCompleto.match(/uses:\s*\S+@\S+/g) || [];
+    const shaPinned = usesLines.filter(u => /@sha256:/.test(u)).length;
+    const actionsOnly = usesLines.filter(u => /actions\//.test(u)).length;
+    if (usesLines.length === 0 || shaPinned + actionsOnly === usesLines.length) {
+        score += 20;
+        strengths.push('Actions com pinning adequado');
+    }
+    else {
+        score += Math.round((shaPinned + actionsOnly) / usesLines.length * 20);
+        issues.push(`${usesLines.length - shaPinned - actionsOnly} action(s) sem SHA pinning`);
+    }
+    const hasCache = /actions\/cache|cache-from|cache-to/.test(srcCompleto);
+    if (hasCache) {
+        score += 15;
+        strengths.push('Caching configurado');
+    }
+    else {
+        issues.push('Sem caching de dependências');
+    }
+    if (/permissions:/.test(srcCompleto)) {
+        score += 15;
+        strengths.push('Permissions definidas');
+    }
+    else {
+        issues.push('Permissions não definidas');
+    }
+    const steps = srcCompleto.match(/-\s*(name:|uses:|run:)/g) || [];
+    const namedSteps = srcCompleto.match(/-\s*name:/g) || [];
+    if (steps.length === 0 || namedSteps.length === steps.length) {
+        score += 10;
+        strengths.push('Todos steps com nome');
+    }
+    else {
+        issues.push(`${steps.length - namedSteps.length} step(s) sem nome`);
+    }
+    const injectionRisks = (srcCompleto.match(/\$\{\{\s*github\.event\.\S+\s*\}\}/g) || []).filter(metrica => /run:/.test(srcCompleto.substring(Math.max(0, srcCompleto.indexOf(metrica) - 100), srcCompleto.indexOf(metrica)))).length;
+    if (injectionRisks === 0) {
+        score += 15;
+        strengths.push('Sem risco de script injection');
+    }
+    else {
+        issues.push(`${injectionRisks} risco(s) de script injection`);
+    }
+    return {
+        score,
+        maxScore,
+        percentage: Math.round(score / maxScore * 100),
+        issues,
+        strengths
+    };
+}
+export const pontuadorWorkflow = {
+    nome: 'pontuador-workflow',
+    categoria: 'workflows',
+    descricao: 'Pontua qualidade de GitHub Actions',
+    pontuar: pontuarWorkflow
+};
+//# sourceMappingURL=scorer-workflow.js.map

package/dist/analysts/github-actions/scorers/scorer-workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-workflow.js","sourceRoot":"","sources":["../../../../src/analysts/github-actions/scorers/scorer-workflow.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAS7C,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,QAAgB;IAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,GAAG,CAAC;IAGxB,MAAM,gBAAgB,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,0DAA0D,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7J,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,sBAAsB,CAAC,CAAC;IACzD,CAAC;IAGD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IAC9D,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACnE,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACtE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,GAAG,WAAW,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QAC3E,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,GAAG,WAAW,4BAA4B,CAAC,CAAC;IACzF,CAAC;IAGD,MAAM,QAAQ,GAAG,oCAAoC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxE,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IAGD,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAGD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7D,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,mBAAmB,CAAC,CAAC;IACtE,CAAC;IAGD,MAAM,cAAc,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,qCAAqC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACpO,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,+BAA+B,CAAC,CAAC;IAChE,CAAC;IACD,OAAO;QACL,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,GAAG,GAAG,CAAC;QAC9C,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,oBAAoB;IAC1B,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,oCAAoC;IAC/C,OAAO,EAAE,eAAe;CACzB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [GRAFICO] Pontuador de qualidade GitHub Actions\n *\n * Avalia a qualidade dos workflows baseado em:\n * - Segurança\n * - Caching\n * - Paralelismo\n * - Boas práticas\n */\n\nimport { splitLines } from '@shared/helpers';\n\nexport interface WorkflowScoreResult {\n  score: number;\n  maxScore: number;\n  percentage: number;\n  issues: string[];\n  strengths: string[];\n}\nexport function pontuarWorkflow(src: string, _relPath: string): WorkflowScoreResult {\n  let score = 0;\n  const maxScore = 100;\n  const issues: string[] = [];\n  const strengths: string[] = [];\n  const _linhas = splitLines(src);\n  const srcCompleto = src;\n\n  // Security - no hardcoded secrets (25 pontos)\n  const hardcodedSecrets = (srcCompleto.match(/\\b(KEY|TOKEN|SECRET|PASSWORD)\\b.*[:=]\\s*['\"][^'\"]+['\"]/gi) || []).filter(linha => !/\\$\\{\\{/.test(linha)).length;\n  if (hardcodedSecrets === 0) {\n    score += 25;\n    strengths.push('Sem secrets hardcoded');\n  } else {\n    issues.push(`${hardcodedSecrets} secret(s) hardcoded`);\n  }\n\n  // SHA pinning (20 pontos)\n  const usesLines = srcCompleto.match(/uses:\\s*\\S+@\\S+/g) || [];\n  const shaPinned = usesLines.filter(u => /@sha256:/.test(u)).length;\n  const actionsOnly = usesLines.filter(u => /actions\\//.test(u)).length;\n  if (usesLines.length === 0 || shaPinned + actionsOnly === usesLines.length) {\n    score += 20;\n    strengths.push('Actions com pinning adequado');\n  } else {\n    score += Math.round((shaPinned + actionsOnly) / usesLines.length * 20);\n    issues.push(`${usesLines.length - shaPinned - actionsOnly} action(s) sem SHA pinning`);\n  }\n\n  // Caching (15 pontos)\n  const hasCache = /actions\\/cache|cache-from|cache-to/.test(srcCompleto);\n  if (hasCache) {\n    score += 15;\n    strengths.push('Caching configurado');\n  } else {\n    issues.push('Sem caching de dependências');\n  }\n\n  // Permissions (15 pontos)\n  if (/permissions:/.test(srcCompleto)) {\n    score += 15;\n    strengths.push('Permissions definidas');\n  } else {\n    issues.push('Permissions não definidas');\n  }\n\n  // Step names (10 pontos)\n  const steps = srcCompleto.match(/-\\s*(name:|uses:|run:)/g) || [];\n  const namedSteps = srcCompleto.match(/-\\s*name:/g) || [];\n  if (steps.length === 0 || namedSteps.length === steps.length) {\n    score += 10;\n    strengths.push('Todos steps com nome');\n  } else {\n    issues.push(`${steps.length - namedSteps.length} step(s) sem nome`);\n  }\n\n  // No script injection (15 pontos)\n  const injectionRisks = (srcCompleto.match(/\\$\\{\\{\\s*github\\.event\\.\\S+\\s*\\}\\}/g) || []).filter(metrica => /run:/.test(srcCompleto.substring(Math.max(0, srcCompleto.indexOf(metrica) - 100), srcCompleto.indexOf(metrica)))).length;\n  if (injectionRisks === 0) {\n    score += 15;\n    strengths.push('Sem risco de script injection');\n  } else {\n    issues.push(`${injectionRisks} risco(s) de script injection`);\n  }\n  return {\n    score,\n    maxScore,\n    percentage: Math.round(score / maxScore * 100),\n    issues,\n    strengths\n  };\n}\nexport const pontuadorWorkflow = {\n  nome: 'pontuador-workflow',\n  categoria: 'workflows',\n  descricao: 'Pontua qualidade de GitHub Actions',\n  pontuar: pontuarWorkflow\n};"]}

package/dist/analysts/gitlab-ci/analysts/analyst-gitlab-ci.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const analistaGitLabCI: Analista;
+//# sourceMappingURL=analyst-gitlab-ci.d.ts.map

package/dist/analysts/gitlab-ci/analysts/analyst-gitlab-ci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-gitlab-ci.d.ts","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/analysts/analyst-gitlab-ci.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,QAAQ,EAAgC,MAAM,GAAG,CAAC;AAKhE,eAAO,MAAM,gBAAgB,EAAE,QAqD9B,CAAC"}

package/dist/analysts/gitlab-ci/analysts/analyst-gitlab-ci.js

@@ -0,0 +1,45 @@
+import { parseDocument } from 'yaml';
+import { detectorGitLabCIPerformance } from '../detectors/detector-gitlab-ci-performance.js';
+import { detectorGitLabCISecurity } from '../detectors/detector-gitlab-ci-security.js';
+export const analistaGitLabCI = {
+    nome: 'gitlab-ci',
+    categoria: 'workflows',
+    descricao: 'Analista avançado de pipelines do GitLab CI',
+    test: (relPath) => relPath === '.gitlab-ci.yml' || relPath.endsWith('.gitlab-ci.yml'),
+    aplicar: async (conteudo, relPath, _ast = null, _fc, contexto) => {
+        const ocorrencias = [];
+        try {
+            const securityResults = await Promise.resolve(detectorGitLabCISecurity.aplicar(conteudo, relPath, null, _fc, contexto));
+            const performanceResults = await Promise.resolve(detectorGitLabCIPerformance.aplicar(conteudo, relPath, null, _fc, contexto));
+            ocorrencias.push(...securityResults, ...performanceResults);
+            const doc = parseDocument(conteudo);
+            const pipeline = doc.toJS();
+            if (pipeline) {
+                const stages = pipeline.stages || ['build', 'test', 'deploy'];
+                void stages;
+                for (const [key, value] of Object.entries(pipeline)) {
+                    if (['image', 'services', 'stages', 'types', 'before_script', 'after_script', 'variables', 'cache', 'include', 'workflow'].includes(key)) {
+                        continue;
+                    }
+                    const job = value;
+                    if (typeof job === 'object' && job !== null && (job.script || job.trigger || job.extends)) {
+                        if (Array.isArray(job.script) && job.script.length > 15) {
+                            ocorrencias.push({
+                                tipo: 'GITLAB_CI_JOB_TOO_LONG',
+                                mensagem: `Job '${key}' possui um script muito longo (${job.script.length} linhas)`,
+                                relPath,
+                                linha: 1,
+                                nivel: 'info',
+                                sugestao: 'Considere extrair o script para um arquivo separado ou quebrar em múltiplos jobs/steps'
+                            });
+                        }
+                    }
+                }
+            }
+        }
+        catch {
+        }
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=analyst-gitlab-ci.js.map

package/dist/analysts/gitlab-ci/analysts/analyst-gitlab-ci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-gitlab-ci.js","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/analysts/analyst-gitlab-ci.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAIrC,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AAEvF,MAAM,CAAC,MAAM,gBAAgB,GAAa;IACxC,IAAI,EAAE,WAAW;IACjB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,6CAA6C;IACxD,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,KAAK,gBAAgB,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAC7F,OAAO,EAAE,KAAK,EAAE,QAAgB,EAAE,OAAe,EAAE,OAAwB,IAAI,EAAE,GAAY,EAAE,QAA2B,EAAyB,EAAE;QACnJ,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,IAAI,CAAC;YAEH,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YACxH,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YAE9H,WAAW,CAAC,IAAI,CAAC,GAAI,eAAgC,EAAE,GAAI,kBAAmC,CAAC,CAAC;YAGhG,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAA6B,CAAC;YAEvD,IAAI,QAAQ,EAAE,CAAC;gBAEb,MAAM,MAAM,GAAI,QAAkC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACzF,KAAK,MAAM,CAAC;gBACZ,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAEpD,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBACzI,SAAS;oBACX,CAAC;oBAGD,MAAM,GAAG,GAAG,KAAoF,CAAC;oBACjG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;wBAE1F,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;4BACxD,WAAW,CAAC,IAAI,CAAC;gCACf,IAAI,EAAE,wBAAwB;gCAC9B,QAAQ,EAAE,QAAQ,GAAG,mCAAmC,GAAG,CAAC,MAAM,CAAC,MAAM,UAAU;gCACnF,OAAO;gCACP,KAAK,EAAE,CAAC;gCACR,KAAK,EAAE,MAAM;gCACb,QAAQ,EAAE,wFAAwF;6BACnG,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QAEH,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Analista Principal de GitLab CI\n *\n * Analisa a estrutura e qualidade de pipelines do GitLab CI.\n */\n\nimport type { NodePath } from '@babel/traverse';\nimport { parseDocument } from 'yaml';\n\nimport type { Analista, ContextoExecucao, Ocorrencia } from '@';\n\nimport { detectorGitLabCIPerformance } from '../detectors/detector-gitlab-ci-performance.js';\nimport { detectorGitLabCISecurity } from '../detectors/detector-gitlab-ci-security.js';\n\nexport const analistaGitLabCI: Analista = {\n  nome: 'gitlab-ci',\n  categoria: 'workflows',\n  descricao: 'Analista avançado de pipelines do GitLab CI',\n  test: (relPath: string) => relPath === '.gitlab-ci.yml' || relPath.endsWith('.gitlab-ci.yml'),\n  aplicar: async (conteudo: string, relPath: string, _ast: NodePath | null = null, _fc?: string, contexto?: ContextoExecucao): Promise<Ocorrencia[]> => {\n    const ocorrencias: Ocorrencia[] = [];\n\n    try {\n      // 1. Executar detectores baseados em regex (rápidos)\n      const securityResults = await Promise.resolve(detectorGitLabCISecurity.aplicar(conteudo, relPath, null, _fc, contexto));\n      const performanceResults = await Promise.resolve(detectorGitLabCIPerformance.aplicar(conteudo, relPath, null, _fc, contexto));\n\n      ocorrencias.push(...(securityResults as Ocorrencia[]), ...(performanceResults as Ocorrencia[]));\n\n      // 2. Análise Estrutural via YAML AST (para detecções mais complexas)\n      const doc = parseDocument(conteudo);\n      const pipeline = doc.toJS() as Record<string, unknown>;\n\n      if (pipeline) {\n        // Exemplo: Detecção de jobs sem stage definido\n        const stages = (pipeline as { stages?: string[] }).stages || ['build', 'test', 'deploy'];\n        void stages; // Reservado para futuras detecções de stages inválidos\n        for (const [key, value] of Object.entries(pipeline)) {\n          // Ignorar palavras reservadas\n          if (['image', 'services', 'stages', 'types', 'before_script', 'after_script', 'variables', 'cache', 'include', 'workflow'].includes(key)) {\n            continue;\n          }\n\n          // Se o valor for um objeto com 'script', provavelmente é um job\n          const job = value as { script?: string[]; trigger?: unknown; extends?: unknown; stage?: string };\n          if (typeof job === 'object' && job !== null && (job.script || job.trigger || job.extends)) {\n            // Detecção de job muito longo (ex: mais de 15 linhas de script)\n            if (Array.isArray(job.script) && job.script.length > 15) {\n              ocorrencias.push({\n                tipo: 'GITLAB_CI_JOB_TOO_LONG',\n                mensagem: `Job '${key}' possui um script muito longo (${job.script.length} linhas)`,\n                relPath,\n                linha: 1, // Precisaria de mapeamento de linha do YAML para ser exato\n                nivel: 'info',\n                sugestao: 'Considere extrair o script para um arquivo separado ou quebrar em múltiplos jobs/steps'\n              });\n            }\n          }\n        }\n      }\n\n    } catch {\n      // Silenciar erros de parse no momento da análise para não travar o processo\n    }\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/gitlab-ci/analysts/index.d.ts

@@ -0,0 +1,2 @@
+export * from './analyst-gitlab-ci.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/gitlab-ci/analysts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC"}

package/dist/analysts/gitlab-ci/analysts/index.js

@@ -0,0 +1,2 @@
+export * from './analyst-gitlab-ci.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/gitlab-ci/analysts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC","sourcesContent":["export * from './analyst-gitlab-ci.js';\n"]}

package/dist/analysts/gitlab-ci/corrections/autofix-engine.d.ts

@@ -0,0 +1,6 @@
+import type { Document } from 'yaml';
+export declare class AutofixEngine {
+    aplicarFixes(content: string, fixers: Array<(doc: Document) => void>): string;
+}
+export declare const autofixEngine: AutofixEngine;
+//# sourceMappingURL=autofix-engine.d.ts.map

package/dist/analysts/gitlab-ci/corrections/autofix-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autofix-engine.d.ts","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/corrections/autofix-engine.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAGrC,qBAAa,aAAa;IACjB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,QAAQ,KAAK,IAAI,CAAC,GAAG,MAAM;CASrF;AAED,eAAO,MAAM,aAAa,eAAsB,CAAC"}

package/dist/analysts/gitlab-ci/corrections/autofix-engine.js

@@ -0,0 +1,19 @@
+import { parseDocument } from 'yaml';
+export class AutofixEngine {
+    aplicarFixes(content, fixers) {
+        if (!content || fixers.length === 0)
+            return content;
+        const doc = parseDocument(content);
+        if (doc.errors.length > 0)
+            return content;
+        for (const fix of fixers) {
+            try {
+                fix(doc);
+            }
+            catch { }
+        }
+        return doc.toString();
+    }
+}
+export const autofixEngine = new AutofixEngine();
+//# sourceMappingURL=autofix-engine.js.map

package/dist/analysts/gitlab-ci/corrections/autofix-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autofix-engine.js","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/corrections/autofix-engine.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAErC,MAAM,OAAO,aAAa;IACjB,YAAY,CAAC,OAAe,EAAE,MAAsC;QACzE,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QACpD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAY,CAAC;QACxC,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport type { Document } from 'yaml';\nimport { parseDocument } from 'yaml';\n\nexport class AutofixEngine {\n  public aplicarFixes(content: string, fixers: Array<(doc: Document) => void>): string {\n    if (!content || fixers.length === 0) return content;\n    const doc = parseDocument(content);\n    if (doc.errors.length > 0) return content;\n    for (const fix of fixers) {\n      try { fix(doc); } catch { /* skip */ }\n    }\n    return doc.toString();\n  }\n}\n\nexport const autofixEngine = new AutofixEngine();\n"]}

package/dist/analysts/gitlab-ci/corrections/correction-gitlab-ci.d.ts

@@ -0,0 +1,4 @@
+import type { Analista, GitLabCICorrection } from '../../../types/index.js';
+export declare function detectarCorrecoesGitLabCI(src: string, _relPath: string): GitLabCICorrection[];
+export declare const correctionGitLabCI: Analista;
+//# sourceMappingURL=correction-gitlab-ci.d.ts.map

package/dist/analysts/gitlab-ci/corrections/correction-gitlab-ci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-gitlab-ci.d.ts","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/corrections/correction-gitlab-ci.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAc,MAAM,GAAG,CAAC;AAGlE,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAsD7F;AAED,eAAO,MAAM,kBAAkB,EAAE,QAsBhC,CAAC"}

package/dist/analysts/gitlab-ci/corrections/correction-gitlab-ci.js

@@ -0,0 +1,76 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+import { criarOcorrencia } from '../../../types/index.js';
+export function detectarCorrecoesGitLabCI(src, _relPath) {
+    const correcoes = [];
+    const linhas = splitLines(src);
+    linhas.forEach((linha, index) => {
+        const numeroLinha = index + 1;
+        if (/\bimage:\s*[^\s@]+:latest\b/.test(linha)) {
+            correcoes.push({
+                tipo: 'gitlab-ci-fix-latest-image',
+                original: linha,
+                sugerido: linha.replace(/:latest\b/, ':3.18'),
+                linha: numeroLinha,
+                confianca: 90
+            });
+        }
+        if (/\b(TOKEN|SECRET|PASSWORD|KEY)\b.*[:=]\s*['"][^'"]+['"]/i.test(linha) && !/\$\{/.test(linha)) {
+            const replaced = linha.replace(/['"][^'"]+['"]/, '$VAR_NAME');
+            correcoes.push({
+                tipo: 'gitlab-ci-use-variable',
+                original: linha,
+                sugerido: replaced,
+                linha: numeroLinha,
+                confianca: 90
+            });
+        }
+    });
+    if (!/cache:/.test(src)) {
+        correcoes.push({
+            tipo: 'gitlab-ci-add-cache',
+            original: linhas[0] || '',
+            sugerido: `cache:\n  key: ${'$'}{CI_COMMIT_REF_SLUG}\n  paths:\n    - node_modules/\n\n${linhas[0] || ''}`,
+            linha: 1,
+            confianca: 85
+        });
+    }
+    if (!/interruptible:/.test(src)) {
+        const jobLines = linhas.filter(l => /^\w+:/.test(l) && !/^(image|services|stages|types|before_script|after_script|variables|cache|include|workflow):/.test(l));
+        if (jobLines.length > 0) {
+            const idx = linhas.indexOf(jobLines[0]);
+            correcoes.push({
+                tipo: 'gitlab-ci-add-interruptible',
+                original: linhas[idx],
+                sugerido: `${linhas[idx]}\n  interruptible: true`,
+                linha: idx + 1,
+                confianca: 80
+            });
+        }
+    }
+    return correcoes;
+}
+export const correctionGitLabCI = {
+    nome: 'correction-gitlab-ci',
+    categoria: 'workflows',
+    descricao: 'Correções automáticas para GitLab CI',
+    test: (relPath) => relPath.endsWith('.gitlab-ci.yml'),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const correcoes = detectarCorrecoesGitLabCI(src, relPath);
+        return correcoes.map(elem => criarOcorrencia({
+            tipo: `correction-${elem.tipo}`,
+            nivel: elem.confianca > 85 ? 'aviso' : 'info',
+            mensagem: `Correção sugerida: ${elem.tipo}`,
+            relPath,
+            linha: elem.linha,
+            sugestao: ` ${elem.original}\n ${elem.sugerido}\nConfiança: ${elem.confianca}%`,
+            correcao: {
+                original: elem.original,
+                novo: elem.sugerido,
+                linha: elem.linha
+            }
+        }));
+    }
+};
+//# sourceMappingURL=correction-gitlab-ci.js.map

package/dist/analysts/gitlab-ci/corrections/correction-gitlab-ci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-gitlab-ci.js","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/corrections/correction-gitlab-ci.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,UAAU,yBAAyB,CAAC,GAAW,EAAE,QAAgB;IACrE,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAE/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;QAE9B,IAAI,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,4BAA4B;gBAClC,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;gBAC7C,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;QAED,IAAI,yDAAyD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;YAC9D,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE;YACzB,QAAQ,EAAE,kBAAkB,GAAG,0DAA0D,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1G,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,6FAA6F,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/J,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,6BAA6B;gBACnC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;gBACrB,QAAQ,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAyB;gBACjD,KAAK,EAAE,GAAG,GAAG,CAAC;gBACd,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAa;IAC1C,IAAI,EAAE,sBAAsB;IAC5B,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,sCAAsC;IACjD,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACtE,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC;YAC3C,IAAI,EAAE,cAAc,IAAI,CAAC,IAAI,EAAE;YAC/B,KAAK,EAAE,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC7C,QAAQ,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;YAC3C,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,QAAQ,gBAAgB,IAAI,CAAC,SAAS,GAAG;YAC/E,QAAQ,EAAE;gBACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB;SACF,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport { splitLines } from '@shared/helpers';\n\nimport type { Analista, GitLabCICorrection, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport function detectarCorrecoesGitLabCI(src: string, _relPath: string): GitLabCICorrection[] {\n  const correcoes: GitLabCICorrection[] = [];\n  const linhas = splitLines(src);\n\n  linhas.forEach((linha, index) => {\n    const numeroLinha = index + 1;\n\n    if (/\\bimage:\\s*[^\\s@]+:latest\\b/.test(linha)) {\n      correcoes.push({\n        tipo: 'gitlab-ci-fix-latest-image',\n        original: linha,\n        sugerido: linha.replace(/:latest\\b/, ':3.18'),\n        linha: numeroLinha,\n        confianca: 90\n      });\n    }\n\n    if (/\\b(TOKEN|SECRET|PASSWORD|KEY)\\b.*[:=]\\s*['\"][^'\"]+['\"]/i.test(linha) && !/\\$\\{/.test(linha)) {\n      const replaced = linha.replace(/['\"][^'\"]+['\"]/, '$VAR_NAME');\n      correcoes.push({\n        tipo: 'gitlab-ci-use-variable',\n        original: linha,\n        sugerido: replaced,\n        linha: numeroLinha,\n        confianca: 90\n      });\n    }\n  });\n\n  if (!/cache:/.test(src)) {\n    correcoes.push({\n      tipo: 'gitlab-ci-add-cache',\n      original: linhas[0] || '',\n      sugerido: `cache:\\n  key: ${'$'}{CI_COMMIT_REF_SLUG}\\n  paths:\\n    - node_modules/\\n\\n${linhas[0] || ''}`,\n      linha: 1,\n      confianca: 85\n    });\n  }\n\n  if (!/interruptible:/.test(src)) {\n    const jobLines = linhas.filter(l => /^\\w+:/.test(l) && !/^(image|services|stages|types|before_script|after_script|variables|cache|include|workflow):/.test(l));\n    if (jobLines.length > 0) {\n      const idx = linhas.indexOf(jobLines[0]);\n      correcoes.push({\n        tipo: 'gitlab-ci-add-interruptible',\n        original: linhas[idx],\n        sugerido: `${linhas[idx]}\\n  interruptible: true`,\n        linha: idx + 1,\n        confianca: 80\n      });\n    }\n  }\n\n  return correcoes;\n}\n\nexport const correctionGitLabCI: Analista = {\n  nome: 'correction-gitlab-ci',\n  categoria: 'workflows',\n  descricao: 'Correções automáticas para GitLab CI',\n  test: (relPath: string): boolean => relPath.endsWith('.gitlab-ci.yml'),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const correcoes = detectarCorrecoesGitLabCI(src, relPath);\n    return correcoes.map(elem => criarOcorrencia({\n      tipo: `correction-${elem.tipo}`,\n      nivel: elem.confianca > 85 ? 'aviso' : 'info',\n      mensagem: `Correção sugerida: ${elem.tipo}`,\n      relPath,\n      linha: elem.linha,\n      sugestao: ` ${elem.original}\\n ${elem.sugerido}\\nConfiança: ${elem.confianca}%`,\n      correcao: {\n        original: elem.original,\n        novo: elem.sugerido,\n        linha: elem.linha\n      }\n    }));\n  }\n};\n"]}

package/dist/analysts/gitlab-ci/corrections/index.d.ts

@@ -0,0 +1,3 @@
+export * from './autofix-engine.js';
+export * from './correction-gitlab-ci.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/gitlab-ci/corrections/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC"}

package/dist/analysts/gitlab-ci/corrections/index.js

@@ -0,0 +1,3 @@
+export * from './autofix-engine.js';
+export * from './correction-gitlab-ci.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/gitlab-ci/corrections/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './autofix-engine.js';\nexport * from './correction-gitlab-ci.js';\n"]}

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-performance.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const detectorGitLabCIPerformance: Analista;
+//# sourceMappingURL=detector-gitlab-ci-performance.d.ts.map

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-performance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-gitlab-ci-performance.d.ts","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/detectors/detector-gitlab-ci-performance.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,eAAO,MAAM,2BAA2B,EAAE,QAuDzC,CAAC"}

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-performance.js

@@ -0,0 +1,51 @@
+import { criarOcorrencia } from '../../../types/index.js';
+export const detectorGitLabCIPerformance = {
+    nome: 'detector-gitlab-ci-performance',
+    categoria: 'performance',
+    descricao: 'Detecta problemas de performance em GitLab CI pipelines',
+    test: (relPath) => relPath.endsWith('.gitlab-ci.yml'),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const ocorrencias = [];
+        const linhas = src.split('\n');
+        if (!/cache:/.test(src)) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'gitlab-ci-missing-cache',
+                nivel: 'aviso',
+                mensagem: 'Pipeline sem configuração de cache global ou por job',
+                relPath,
+                linha: 1,
+                sugestao: 'Use cache para dependências (ex: node_modules, .cache) para acelerar o pipeline'
+            }));
+        }
+        if (!/interruptible:/.test(src)) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'gitlab-ci-missing-interruptible',
+                nivel: 'info',
+                mensagem: 'Jobs não marcados como interruptible',
+                relPath,
+                linha: 1,
+                sugestao: 'Adicione interruptible: true para cancelar pipelines antigos quando um novo push ocorrer'
+            }));
+        }
+        linhas.forEach((linha, index) => {
+            const numeroLinha = index + 1;
+            if (/artifacts:/.test(linha)) {
+                const nextLines = src.split('\n').slice(index, index + 5).join('\n');
+                if (!/expire_in:/.test(nextLines)) {
+                    ocorrencias.push(criarOcorrencia({
+                        tipo: 'gitlab-ci-artifacts-no-expiration',
+                        nivel: 'info',
+                        mensagem: 'Artifacts sem tempo de expiração definido',
+                        relPath,
+                        linha: numeroLinha,
+                        sugestao: 'Adicione expire_in: (ex: 1 week) para economizar storage no GitLab'
+                    }));
+                }
+            }
+        });
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=detector-gitlab-ci-performance.js.map

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-performance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-gitlab-ci-performance.js","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/detectors/detector-gitlab-ci-performance.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,CAAC,MAAM,2BAA2B,GAAa;IACnD,IAAI,EAAE,gCAAgC;IACtC,SAAS,EAAE,aAAa;IACxB,SAAS,EAAE,yDAAyD;IACpE,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAC7D,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAG/B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,yBAAyB;gBAC/B,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,sDAAsD;gBAChE,OAAO;gBACP,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,iFAAiF;aAC5F,CAAC,CAAC,CAAC;QACN,CAAC;QAGD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,iCAAiC;gBACvC,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,sCAAsC;gBAChD,OAAO;gBACP,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,0FAA0F;aACrG,CAAC,CAAC,CAAC;QACP,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;YAG9B,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;wBAC/B,IAAI,EAAE,mCAAmC;wBACzC,KAAK,EAAE,MAAM;wBACb,QAAQ,EAAE,2CAA2C;wBACrD,OAAO;wBACP,KAAK,EAAE,WAAW;wBAClB,QAAQ,EAAE,oEAAoE;qBAC/E,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Detector de Performance para GitLab CI\n *\n * Detecta problemas de performance em pipelines:\n * - Falta de cache\n * - Falta de interruptible (cancelamento automático)\n * - Artifacts sem expiração\n */\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport const detectorGitLabCIPerformance: Analista = {\n  nome: 'detector-gitlab-ci-performance',\n  categoria: 'performance',\n  descricao: 'Detecta problemas de performance em GitLab CI pipelines',\n  test: (relPath: string) => relPath.endsWith('.gitlab-ci.yml'),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const ocorrencias: Ocorrencia[] = [];\n    const linhas = src.split('\\n');\n\n    // 1. Falta de cache\n    if (!/cache:/.test(src)) {\n      ocorrencias.push(criarOcorrencia({\n        tipo: 'gitlab-ci-missing-cache',\n        nivel: 'aviso',\n        mensagem: 'Pipeline sem configuração de cache global ou por job',\n        relPath,\n        linha: 1,\n        sugestao: 'Use cache para dependências (ex: node_modules, .cache) para acelerar o pipeline'\n      }));\n    }\n\n    // 2. Uso de interruptible\n    if (!/interruptible:/.test(src)) {\n       ocorrencias.push(criarOcorrencia({\n         tipo: 'gitlab-ci-missing-interruptible',\n         nivel: 'info',\n         mensagem: 'Jobs não marcados como interruptible',\n         relPath,\n         linha: 1,\n         sugestao: 'Adicione interruptible: true para cancelar pipelines antigos quando um novo push ocorrer'\n       }));\n    }\n\n    linhas.forEach((linha, index) => {\n      const numeroLinha = index + 1;\n\n      // 3. Artifacts sem expiração\n      if (/artifacts:/.test(linha)) {\n        const nextLines = src.split('\\n').slice(index, index + 5).join('\\n');\n        if (!/expire_in:/.test(nextLines)) {\n          ocorrencias.push(criarOcorrencia({\n            tipo: 'gitlab-ci-artifacts-no-expiration',\n            nivel: 'info',\n            mensagem: 'Artifacts sem tempo de expiração definido',\n            relPath,\n            linha: numeroLinha,\n            sugestao: 'Adicione expire_in: (ex: 1 week) para economizar storage no GitLab'\n          }));\n        }\n      }\n    });\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-security.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const detectorGitLabCISecurity: Analista;
+//# sourceMappingURL=detector-gitlab-ci-security.d.ts.map

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-gitlab-ci-security.d.ts","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/detectors/detector-gitlab-ci-security.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,eAAO,MAAM,wBAAwB,EAAE,QAqDtC,CAAC"}

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-security.js

@@ -0,0 +1,48 @@
+import { criarOcorrencia } from '../../../types/index.js';
+export const detectorGitLabCISecurity = {
+    nome: 'detector-gitlab-ci-security',
+    categoria: 'security',
+    descricao: 'Detecta vulnerabilidades em GitLab CI pipelines',
+    test: (relPath) => relPath.endsWith('.gitlab-ci.yml'),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const ocorrencias = [];
+        const linhas = src.split('\n');
+        linhas.forEach((linha, index) => {
+            const numeroLinha = index + 1;
+            if (/\bimage:\s*[^\s@]+:latest\b/.test(linha) || (/\bimage:\s*[^\s@:]+$/.test(linha.trim()) && linha.includes('image:'))) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'gitlab-ci-image-latest',
+                    nivel: 'aviso',
+                    mensagem: 'Uso de imagem :latest ou sem tag definida',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Use uma versão específica da imagem (ex: alpine:3.18) para garantir builds reproduzíveis'
+                }));
+            }
+            if (/\b(TOKEN|SECRET|PASSWORD|KEY)\b.*[:=]\s*['"][^'"]+['"]/i.test(linha) && !/\$\{/.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'gitlab-ci-hardcoded-secret',
+                    nivel: 'erro',
+                    mensagem: 'Secret hardcoded detectada no pipeline',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Use variáveis de ambiente do GitLab (Settings > CI/CD > Variables) e referencie com $VAR'
+                }));
+            }
+            if (/\$\{\s*(CI_COMMIT_TITLE|CI_COMMIT_DESCRIPTION|GITLAB_USER_NAME)\s*\}/.test(linha) && /\s*-\s+/.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'gitlab-ci-script-injection',
+                    nivel: 'erro',
+                    mensagem: 'Possível script injection via variáveis de contexto do GitLab',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Evite usar essas variáveis diretamente em comandos de shell ou use aspas duplas corretamente'
+                }));
+            }
+        });
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=detector-gitlab-ci-security.js.map

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-gitlab-ci-security.js","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/detectors/detector-gitlab-ci-security.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,CAAC,MAAM,wBAAwB,GAAa;IAChD,IAAI,EAAE,6BAA6B;IACnC,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,iDAAiD;IAC5D,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAC7D,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;YAI9B,IAAI,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACxH,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,wBAAwB;oBAC9B,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,2CAA2C;oBACrD,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,0FAA0F;iBACrG,CAAC,CAAC,CAAC;YACP,CAAC;YAGD,IAAI,yDAAyD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjG,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,4BAA4B;oBAClC,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,wCAAwC;oBAClD,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,0FAA0F;iBACrG,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,sEAAsE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChH,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,4BAA4B;oBAClC,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,+DAA+D;oBACzE,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,8FAA8F;iBACzG,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Detector de Segurança para GitLab CI\n *\n * Detecta vulnerabilidades em pipelines:\n * - Imagens sem versão específica (latest)\n * - Secrets hardcoded\n * - Script injection\n */\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport const detectorGitLabCISecurity: Analista = {\n  nome: 'detector-gitlab-ci-security',\n  categoria: 'security',\n  descricao: 'Detecta vulnerabilidades em GitLab CI pipelines',\n  test: (relPath: string) => relPath.endsWith('.gitlab-ci.yml'),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const ocorrencias: Ocorrencia[] = [];\n    const linhas = src.split('\\n');\n\n    linhas.forEach((linha, index) => {\n      const numeroLinha = index + 1;\n\n      // 1. Imagens sem versão (latest)\n      // Detecta 'image: name:latest' ou 'image: name' sem dois pontos\n      if (/\\bimage:\\s*[^\\s@]+:latest\\b/.test(linha) || (/\\bimage:\\s*[^\\s@:]+$/.test(linha.trim()) && linha.includes('image:'))) {\n         ocorrencias.push(criarOcorrencia({\n           tipo: 'gitlab-ci-image-latest',\n           nivel: 'aviso',\n           mensagem: 'Uso de imagem :latest ou sem tag definida',\n           relPath,\n           linha: numeroLinha,\n           sugestao: 'Use uma versão específica da imagem (ex: alpine:3.18) para garantir builds reproduzíveis'\n         }));\n      }\n\n      // 2. Variáveis sensíveis hardcoded\n      if (/\\b(TOKEN|SECRET|PASSWORD|KEY)\\b.*[:=]\\s*['\"][^'\"]+['\"]/i.test(linha) && !/\\$\\{/.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'gitlab-ci-hardcoded-secret',\n          nivel: 'erro',\n          mensagem: 'Secret hardcoded detectada no pipeline',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Use variáveis de ambiente do GitLab (Settings > CI/CD > Variables) e referencie com $VAR'\n        }));\n      }\n\n      // 3. Script injection\n      if (/\\$\\{\\s*(CI_COMMIT_TITLE|CI_COMMIT_DESCRIPTION|GITLAB_USER_NAME)\\s*\\}/.test(linha) && /\\s*-\\s+/.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'gitlab-ci-script-injection',\n          nivel: 'erro',\n          mensagem: 'Possível script injection via variáveis de contexto do GitLab',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Evite usar essas variáveis diretamente em comandos de shell ou use aspas duplas corretamente'\n        }));\n      }\n    });\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-structure.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const detectorGitLabCIEstrutura: Analista;
+//# sourceMappingURL=detector-gitlab-ci-structure.d.ts.map

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-structure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-gitlab-ci-structure.d.ts","sourceRoot":"","sources":["../../../../src/analysts/gitlab-ci/detectors/detector-gitlab-ci-structure.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,eAAO,MAAM,yBAAyB,EAAE,QAqDvC,CAAC"}