/**
 * Vendored snapshot of GitLab CI predefined variables whose values are
 * attacker-controllable — branch/tag names, commit and merge-request titles and
 * descriptions, author identity. Interpolating these into a `script:` (or using
 * them as a gate) lets a crafted branch name or commit title influence what runs.
 *
 * Source: GitLab "Predefined CI/CD variables" reference, filtered to the values
 * an outside contributor can set on a fork or merge request. Advisory and
 * necessarily incomplete; editing this list is the refresh mechanism.
 */
export declare const UNTRUSTED_CI_VARIABLES: readonly string[];
/** Reference forms a variable can take in a script: `$VAR` or `${VAR}`. */
export declare function variableReferenced(text: string, name: string): boolean;
//# sourceMappingURL=untrusted-variables.d.ts.map