/**
 * WGL047: Software Fetched and Executed at Runtime Without Verification
 *
 * Flags a `script:` command that pipes a network download straight into a shell
 * (`curl ... | bash`, `wget ... | sh`). The fetched script is unpinned and
 * unverified, so whoever controls the URL controls what runs in the job.
 * Download to a file, verify a checksum/signature, then execute it.
 */
import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
export declare const wgl047: PostSynthCheck;
//# sourceMappingURL=wgl047.d.ts.map