/**
 * WGL035: Untrusted CI Variable Interpolated into a Script
 *
 * Flags an attacker-controllable predefined variable (branch/tag name, commit or
 * merge-request title/description, author) referenced in a `script:` command. A
 * crafted branch name or commit title containing shell metacharacters can break
 * out of the command. Quote the reference and avoid using it in sensitive
 * commands, or sanitize it first.
 */
import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
export declare const wgl035: PostSynthCheck;
//# sourceMappingURL=wgl035.d.ts.map