export declare const AnalistaGithubActionsMensagens: {
    readonly resumoWorkflow: (score: number, total: number) => string;
    readonly workflowOtimo: "Workflow follows all GitHub Actions best practices";
    readonly workflowBom: "Workflow is good with few low-priority issues";
    readonly workflowRegular: "Workflow needs attention - moderate issues found";
    readonly workflowRuim: "Workflow needs urgent improvements - critical issues found";
    readonly erroAnalisarWorkflow: (erro: unknown) => string;
    readonly missingCodeowners: "Missing CODEOWNERS";
    readonly missingCodeOfConduct: "README without Code of Conduct";
    readonly missingStaleBot: "Missing Stale bot";
    readonly missingReleaseAutomation: "Missing release automation";
    readonly missingIssueTemplates: "Missing issue templates";
    readonly missingPrTemplate: "Missing PR template";
    readonly missingSemanticVersioning: "Semantic versioning automation not detected";
    readonly missingChangelogAutomation: "Missing changelog automation";
    readonly missingLicenseHeaders: "Many files missing SPDX license header";
    readonly suspiciousActionDetected: (uses: string) => string;
    readonly suspiciousActionDetectedSugestao: "Prefer official actions or verified organizations. Review the fork code before using.";
    readonly possibleVulnerableNpmDependency: (dep: string) => string;
    readonly workflowInstallsDepsWithoutAudit: "Workflow installs dependencies without security audit";
    readonly workflowInstallsDepsWithoutAuditSugestao: "Add an npm audit, snyk or similar step to detect vulnerabilities";
    readonly checkoutsWithoutPersistCredentials: (count: number) => string;
    readonly checkoutsWithoutPersistCredentialsSugestao: "Add persist-credentials: false to avoid token exposure, unless the workflow needs to write to the repository";
    readonly workflowWithoutTimeout: "Workflow without timeout configured";
    readonly workflowWithoutTimeoutSugestao: "Add timeout-minutes to prevent infinite executions";
    readonly possibleScriptInjection: "Possible script injection via GitHub context";
    readonly possibleScriptInjectionSugestao: "Sanitize input or use environment variables";
    readonly hardcodedSecret: "Hardcoded secret in workflow";
    readonly hardcodedSecretSugestao: "Use ${{ secrets.SECRET_NAME }}";
    readonly sudoUsageDetected: "Sudo usage detected";
    readonly sudoUsageDetectedSugestao: "Use container with specific user instead of sudo";
    readonly absoluteTempPathHardcoded: "Absolute or temporary path hardcoded";
    readonly absoluteTempPathHardcodedSugestao: "Use environment variables like $GITHUB_WORKSPACE or ${{ runner.temp }}";
    readonly possibleSecretExposure: "Possible secret exposure in console output";
    readonly possibleSecretExposureSugestao: "Use ::add-mask:: before printing or avoid printing secrets";
    readonly pullRequestTargetExecutesForkCode: "pull_request_target may execute fork code";
    readonly pullRequestTargetExecutesForkCodeSugestao: "Use pull_request instead of pull_request_target";
    readonly workflowRunUnsafe: "workflow_run may be unsafe with fork checkout";
    readonly workflowRunUnsafeSugestao: "Use pull_request or ensure no checkout from external refs";
    readonly checkoutFetchDepthZero: "checkout with fetch-depth: 0 downloads full history";
    readonly checkoutFetchDepthZeroSugestao: "Use fetch-depth: 1 if you don't need the full history";
    readonly permissionsNotDefined: "Permissions not defined - uses default GITHUB_TOKEN";
    readonly permissionsNotDefinedSugestao: "Add permissions: with minimum required scope";
    readonly buildDeployWithoutSecurityAudit: "Build/deploy workflow without security audit";
    readonly buildDeployWithoutSecurityAuditSugestao: "Add an npm audit, snyk or similar step";
    readonly workflowWithoutTrigger: "Workflow without trigger defined (push, pull_request, schedule, etc.)";
    readonly workflowWithoutTriggerSugestao: "Define explicit triggers to avoid unexpected execution";
    readonly pullRequestTargetGrantsWritePermissions: "pull_request_target grants write permissions to the repository";
    readonly pullRequestTargetGrantsWritePermissionsSugestao: "Use pull_request instead of pull_request_target, or carefully validate the source branch";
    readonly workflowDispatchWithoutInputs: "workflow_dispatch without defined inputs";
    readonly workflowDispatchWithoutInputsSugestao: "Define required inputs to control manual workflow execution";
    readonly erroAplicarCorrecao: (erro: unknown) => string;
};
//# sourceMappingURL=analyst-github-actions-messages.d.ts.map