export type ShellReevaluatingConstruct = 'eval' | 'sh-c' | 'bash-c' | 'source' | 'let' | 'declare-i' | 'arithmetic' | 'awk' | 'jq' | 'sed' | 'xargs-sh-c';
export interface ShellCodePositionMatch {
    readonly construct: ShellReevaluatingConstruct;
    readonly name: string;
}
export interface ShellCodePositionAnalysis {
    readonly matches: readonly ShellCodePositionMatch[];
}
/**
 * Finds workflow-controlled values that are passed to shell constructs which
 * deliberately parse or evaluate their arguments again.
 *
 * The scanner follows direct references in a single shell word only. It does
 * not attempt shell data-flow analysis, and intentionally prefers a missed
 * warning over a false positive.
 */
export declare function classifyShellCodePosition(params: {
    readonly command: string;
    readonly workflowDataNames: Iterable<string>;
}): ShellCodePositionAnalysis;
//# sourceMappingURL=shell-code-position.d.ts.map