/**
 * GitHub Actions Workflow Scanner
 *
 * Scans .github/workflows/*.yml files for CI/CD pipeline attack indicators
 * including remote code execution, secrets exfiltration, compromised action
 * references, unpinned versions, and encoded payloads.
 */
import type { Finding } from "./types.js";
/**
 * Scan a directory for GitHub Actions workflow files and return findings.
 * Called from the main scanner during directory scans.
 */
export declare function scanGitHubActionsWorkflows(dir: string): Finding[];
//# sourceMappingURL=github-actions-scanner.d.ts.map