Skip to main content

githubActions.configs.strict

Opinionated operational guardrails for mature workflow estates.

Included rulesโ€‹

Fix legend:

  • ๐Ÿ”ง = autofixable
  • ๐Ÿ’ก = suggestions available
  • โ€” = report only
RuleFix
R009 action-name-casing๐Ÿ”ง
R010 job-id-casingโ€”
R011 max-jobs-per-actionโ€”
R012 no-external-jobโ€”
R026 no-inherit-secretsโ€”
R042 no-invalid-concurrency-contextโ€”
R019 no-invalid-keyโ€”
R041 no-invalid-reusable-workflow-job-keyโ€”
R040 no-invalid-workflow-call-output-valueโ€”
R030 no-pr-head-checkout-in-pull-request-targetโ€”
R027 no-secrets-in-ifโ€”
R036 no-self-hosted-runner-on-fork-pr-eventsโ€”
R069 no-template-placeholder-in-non-template-workflowโ€”
R013 no-top-level-envโ€”
R037 no-unknown-job-output-referenceโ€”
R038 no-unknown-step-referenceโ€”
R029 no-untrusted-input-in-runโ€”
R023 no-write-all-permissionsโ€”
R003 pin-action-shasโ€”
R015 prefer-fail-fastโ€”
R020 prefer-file-extensionโ€”
R033 prefer-inputs-context๐Ÿ”ง
R005 require-action-nameโ€”
R006 require-action-run-nameโ€”
R025 require-checkout-before-local-actionโ€”
R007 require-job-name๐Ÿ’ก
R008 require-job-step-name๐Ÿ’ก
R002 require-job-timeout-minutesโ€”
R035 require-merge-group-triggerโ€”
R032 require-pull-request-target-branchesโ€”
R021 require-run-step-shellโ€”
R031 require-trigger-typesโ€”
R034 require-workflow-call-input-typeโ€”
R039 require-workflow-call-output-valueโ€”
R004 require-workflow-concurrencyโ€”
R022 require-workflow-dispatch-input-typeโ€”
R024 require-workflow-interface-descriptionโ€”
R001 require-workflow-permissionsโ€”
R028 require-workflow-run-branchesโ€”
R017 valid-timeout-minutesโ€”
R018 valid-trigger-eventsโ€”