/**
 * WGL045: Credential-Bearing Artifact Path
 *
 * Flags an `artifacts:paths:` entry that looks like it would sweep a credential
 * or sensitive file into the artifact (`.env`, `*.pem`, `id_rsa`, `*.key`,
 * `.npmrc`, `.netrc`, `credentials`). Artifacts flow to later stages and are
 * downloadable, so a captured credential leaks across the boundary. Exclude the
 * sensitive file from the artifact path.
 */
import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
export declare const wgl045: PostSynthCheck;
//# sourceMappingURL=wgl045.d.ts.map