/**
 * GitHub Agentic Workflow (gh-aw) markdown scanner (v5.10).
 *
 * GitHub Agentic Workflows live in `.github/workflows/*.md`: YAML frontmatter
 * (on:/permissions:/engine:/tools:/safe-outputs:) plus a natural-language body
 * that IS the agent's instructions. The legacy .yml-only workflow scanner skips
 * these entirely. The GitLost disclosure (Noma, July 2026) exploited exactly
 * this file shape: an untrusted issue trigger + a public add-comment tool +
 * cross-repo read = private data leaked through a public comment. We can only
 * see the static POSTURE, never the runtime issue payload.
 */
import type { Finding } from "./types.js";
/** Scan `.github/workflows/*.md` gh-aw files under `dir`. */
export declare function scanAgenticWorkflows(dir: string): Finding[];
//# sourceMappingURL=agentic-workflow-scanner.d.ts.map