export declare const AnalistaGithubActionsMensagens: {
    readonly resumoWorkflow: (score: number, total: number) => string;
    readonly workflowOtimo: "工作流遵循所有 GitHub Actions 最佳实践";
    readonly workflowBom: "工作流良好,只有少量低优先级问题";
    readonly workflowRegular: "工作流需要注意 - 发现中等问题";
    readonly workflowRuim: "工作流需要紧急改进 - 发现严重问题";
    readonly erroAnalisarWorkflow: (erro: unknown) => string;
    readonly missingCodeowners: "缺少 CODEOWNERS";
    readonly missingCodeOfConduct: "README 没有行为准则";
    readonly missingStaleBot: "缺少 Stale bot";
    readonly missingReleaseAutomation: "缺少发布自动化";
    readonly missingIssueTemplates: "缺少 Issue 模板";
    readonly missingPrTemplate: "缺少 PR 模板";
    readonly missingSemanticVersioning: "未检测到语义化版本自动化";
    readonly missingChangelogAutomation: "缺少变更日志自动化";
    readonly missingLicenseHeaders: "许多文件缺少 SPDX 许可证头";
    readonly suspiciousActionDetected: (uses: string) => string;
    readonly suspiciousActionDetectedSugestao: "推荐使用官方操作或经过验证的组织。使用前请审查 fork 代码。";
    readonly possibleVulnerableNpmDependency: (dep: string) => string;
    readonly workflowInstallsDepsWithoutAudit: "工作流安装依赖项时未进行安全审计";
    readonly workflowInstallsDepsWithoutAuditSugestao: "添加 npm audit、snyk 或类似步骤以检测漏洞";
    readonly checkoutsWithoutPersistCredentials: (count: number) => string;
    readonly checkoutsWithoutPersistCredentialsSugestao: "添加 persist-credentials: false 以避免令牌暴露,除非工作流需要写入仓库";
    readonly workflowWithoutTimeout: "工作流未配置超时";
    readonly workflowWithoutTimeoutSugestao: "添加 timeout-minutes 以防止无限执行";
    readonly possibleScriptInjection: "可能通过 GitHub 上下文进行脚本注入";
    readonly possibleScriptInjectionSugestao: "对输入进行清理或使用环境变量";
    readonly hardcodedSecret: "工作流中硬编码的密钥";
    readonly hardcodedSecretSugestao: "使用 ${{ secrets.SECRET_NAME }}";
    readonly sudoUsageDetected: "检测到使用 sudo";
    readonly sudoUsageDetectedSugestao: "使用具有特定用户的容器代替 sudo";
    readonly absoluteTempPathHardcoded: "硬编码的绝对路径或临时路径";
    readonly absoluteTempPathHardcodedSugestao: "使用 $GITHUB_WORKSPACE 或 ${{ runner.temp }} 等环境变量";
    readonly possibleSecretExposure: "可能在控制台输出中暴露密钥";
    readonly possibleSecretExposureSugestao: "在打印前使用 ::add-mask:: 或避免打印密钥";
    readonly pullRequestTargetExecutesForkCode: "pull_request_target 可能执行 fork 代码";
    readonly pullRequestTargetExecutesForkCodeSugestao: "使用 pull_request 代替 pull_request_target";
    readonly workflowRunUnsafe: "workflow_run 在使用 fork checkout 时可能不安全";
    readonly workflowRunUnsafeSugestao: "使用 pull_request 或确保没有来自外部引用的 checkout";
    readonly checkoutFetchDepthZero: "fetch-depth: 0 的 checkout 会下载完整历史记录";
    readonly checkoutFetchDepthZeroSugestao: "如果不需要完整历史记录,使用 fetch-depth: 1";
    readonly permissionsNotDefined: "未定义 Permissions - 使用默认的 GITHUB_TOKEN";
    readonly permissionsNotDefinedSugestao: "添加具有最小所需范围的 permissions:";
    readonly buildDeployWithoutSecurityAudit: "构建/部署工作流未进行安全审计";
    readonly buildDeployWithoutSecurityAuditSugestao: "添加 npm audit、snyk 或类似步骤";
    readonly workflowWithoutTrigger: "工作流未定义触发器 (push, pull_request, schedule 等)";
    readonly workflowWithoutTriggerSugestao: "定义显式触发器以避免意外执行";
    readonly pullRequestTargetGrantsWritePermissions: "pull_request_target 授予仓库写入权限";
    readonly pullRequestTargetGrantsWritePermissionsSugestao: "使用 pull_request 代替 pull_request_target,或仔细验证源分支";
    readonly workflowDispatchWithoutInputs: "workflow_dispatch 未定义 inputs";
    readonly workflowDispatchWithoutInputsSugestao: "定义必需输入以控制手动工作流执行";
    readonly erroAplicarCorrecao: (erro: unknown) => string;
};
//# sourceMappingURL=analyst-github-actions-messages.d.ts.map