/**
 * WGL046: Cache Populated in a Merge-Request Pipeline (Poisoning Risk)
 *
 * Flags a job that writes a cache (`cache:` with a push policy) and is reachable
 * from merge-request pipelines. An outside contributor's MR can populate the
 * cache; a later protected run that restores the same key then executes
 * attacker-influenced contents. Restrict cache writes to protected refs, or
 * scope cache keys so MR pipelines cannot write entries a protected run reads.
 */
import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
export declare const wgl046: PostSynthCheck;
//# sourceMappingURL=wgl046.d.ts.map