# actionlint configuration.
#
# `*.lock.yml` workflows are GENERATED by `gh aw compile` (githubnext/gh-aw)
# and committed as build artifacts — they are not hand-authored and are
# overwritten on every recompile, so they must not be hand-patched. Two
# classes of finding on them are known false positives:
#
# - `queue: max` under `concurrency:` is a gh-aw compiler extension; GitHub's
# own tooling emits it, but actionlint's schema check does not recognize
# the key.
# - shellcheck SC2016/SC2086 fire inside compiler-generated bash that gh-aw
# controls.
#
# Scope the suppressions to the generated lock files and to those specific
# findings only — hand-authored workflows are still fully linted.
paths:
"**/*.lock.yml":
ignore:
- 'unexpected key "queue" for "concurrency" section'
- 'shellcheck reported issue in this script: SC2016'
- 'shellcheck reported issue in this script: SC2086'