/**
 * WGL034: OIDC id_token Mintable from a Merge-Request Pipeline
 *
 * Flags a job that declares an `id_tokens:` (OIDC) and is reachable from
 * merge-request pipelines. MR pipelines can be triggered by outside
 * contributors, so a job that mints a cloud-federated token there hands fork
 * code a path to your cloud roles. Gate OIDC jobs to protected refs, or require
 * approval before they run.
 */
import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
export declare const wgl034: PostSynthCheck;
//# sourceMappingURL=wgl034.d.ts.map