gx 0.8.3

CLI to manage Github Actions dependencies
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

#![expect(clippy::pub_use, reason = "reexport from extracted submodule")]

/// Core lint command runner (phase orchestration + the public Lint command).
mod command;
pub mod report;
/// Rule identity (`RuleName`), `Diagnostic`/`Context`/`Rule` types, and ignore matchers.
mod rule;
/// Runs shellcheck over bash/sh `run:` bodies and surfaces its findings.
mod run_shellcheck;
/// Detects workflows where the pinned SHA does not match the lock file.
mod sha_mismatch;
/// Detects stale version comments that no longer match the locked version.
mod stale_comment;
/// Detects actions used without a pinned SHA.
mod unpinned;
/// Detects actions present in workflows but missing from the manifest.
mod unsynced_manifest;
/// Workflow-security rule family (permissions, triggers, secrets, concurrency).
mod workflow_security;
/// Workflow-validity rule family (dangling references, unresolved expressions).
mod workflow_validity;

pub use command::{Error, Lint, collect_diagnostics};
pub use rule::{Context, Diagnostic, Rule, RuleName, format_and_report};