no-unused-input-in-composite

Rule catalog ID: R053

Targeted pattern scope

Composite action inputs declared under inputs.

What this rule reports

Reports declared inputs that are never referenced as inputs.<id>.

Why this rule exists

Unused inputs increase maintenance burden and create confusing action interfaces.

❌ Incorrect

inputs:
  token:
    description: Token
runs:
  using: composite
  steps:
    - run: echo hello
      shell: bash

✅ Correct

inputs:
  token:
    description: Token
runs:
  using: composite
  steps:
    - run: echo "${{ inputs.token }}"
      shell: bash

Additional examples

For larger repositories, this rule is often enabled together with one of the published presets so violations are caught in pull requests before workflow changes are merged.

ESLint flat config example

import githubActions from "eslint-plugin-github-actions-2";

export default [
  {
    files: ["**/*.{yml,yaml}"],
    plugins: {
      "github-actions": githubActions,
    },
    rules: {
      "github-actions/no-unused-input-in-composite": "error",
    },
  },
];

When not to use it

You can disable this rule when its policy does not match your repository standards, or when equivalent enforcement is already handled by another policy tool.

Targeted pattern scope​

What this rule reports​

Why this rule exists​

❌ Incorrect​

✅ Correct​

Additional examples​

ESLint flat config example​

When not to use it​

Further reading​