GetAllCodemods returns all available codemods in the registry
()
| 27 | |
| 28 | // GetAllCodemods returns all available codemods in the registry |
| 29 | func GetAllCodemods() []Codemod { |
| 30 | codemods := []Codemod{ |
| 31 | getTimeoutMinutesCodemod(), |
| 32 | getNetworkFirewallCodemod(), |
| 33 | getCommandToSlashCommandCodemod(), |
| 34 | getWorkflowDispatchRequiredFalseCodemod(), // Set required: false for slash/label command triggers |
| 35 | getMCPScriptsModeCodemod(), |
| 36 | getUploadAssetsCodemod(), |
| 37 | getMigrateWritePermissionsToReadCodemod(), |
| 38 | getExpandPermissionsShorthandCodemod(), // Fix permissions: read -> permissions: read-all |
| 39 | getAgentTaskToAgentSessionCodemod(), |
| 40 | getSandboxFalseToAgentFalseCodemod(), // Convert sandbox: false to sandbox.agent: false |
| 41 | getScheduleAtToAroundCodemod(), |
| 42 | getDeleteSchemaFileCodemod(), |
| 43 | getGrepToolRemovalCodemod(), |
| 44 | getMCPNetworkMigrationCodemod(), |
| 45 | getDiscussionFlagRemovalCodemod(), |
| 46 | getDiscussionTriggerCategoriesLowercaseCodemod(), |
| 47 | getMCPModeToTypeCodemod(), |
| 48 | getInstallScriptURLCodemod(), |
| 49 | getBashAnonymousRemovalCodemod(), // Replace bash: with bash: false |
| 50 | getBashSingleQuotedArgsCodemod(), // Rewrite single-quoted bash args to double-quoted form |
| 51 | getActivationOutputsCodemod(), // Transform needs.activation.outputs.* to steps.sanitized.outputs.* |
| 52 | getRolesToOnRolesCodemod(), // Move top-level roles to on.roles |
| 53 | getBotsToOnBotsCodemod(), // Move top-level bots to on.bots |
| 54 | getEngineStepsToTopLevelCodemod(), // Move engine.steps to top-level steps |
| 55 | getEngineMaxRunsToTopLevelCodemod(), // Move engine.max-runs to top-level max-turns |
| 56 | getMaxRunsToMaxTurnsCodemod(), // Rename top-level max-runs to max-turns |
| 57 | getEngineMaxTurnsToTopLevelCodemod(), // Move engine.max-turns to top-level max-turns |
| 58 | getStepsRunSecretsToEnvCodemod(), // Move all ${{ ... }} expressions in step run fields to step env bindings |
| 59 | getEngineEnvSecretsCodemod(), // Remove unsafe secret-bearing engine.env entries |
| 60 | getTopLevelEnvSecretsGuidedErrorCodemod(), // Detect secrets in top-level env: and emit guided error |
| 61 | getAssignToAgentDefaultAgentCodemod(), // Rename deprecated default-agent to name in assign-to-agent |
| 62 | getPlaywrightDomainsToNetworkAllowedCodemod(), // Migrate tools.playwright.allowed_domains to network.allowed |
| 63 | getExpiresIntegerToDayStringCodemod(), // Convert expires integer (days) to string with 'd' suffix |
| 64 | getGitHubAppCodemod(), // Rename deprecated 'app' to 'github-app' |
| 65 | getGitHubAppClientIDCodemod(), // Rename deprecated github-app.app-id to github-app.client-id |
| 66 | getSafeOutputRequireTitlePrefixCodemod(), // Rename deprecated safe-outputs title-prefix constraint fields |
| 67 | getSafeOutputMergePRConstraintsCodemod(), // Rename deprecated merge-pull-request allowed-labels/allowed-branches |
| 68 | getSafeOutputAddReviewerAllowlistsCodemod(), // Rename deprecated add-reviewer reviewers/team-reviewers |
| 69 | getSafeOutputDispatchRepositoryKeyCodemod(), // Rename deprecated safe-outputs.dispatch_repository key |
| 70 | getSafeInputsToMCPScriptsCodemod(), // Rename safe-inputs to mcp-scripts |
| 71 | getRateLimitToUserRateLimitCodemod(), // Rename rate-limit to user-rate-limit with max key migration |
| 72 | getEffectiveTokensToAICreditsCodemod(), // Migrate obsolete effective-token budget keys to AI credits keys |
| 73 | getMessagesEffectiveTokensSuffixToAICreditsSuffixCodemod(), // Migrate safe-outputs.messages ET suffix placeholders to AI credits suffix placeholders |
| 74 | getSerenaToSharedImportCodemod(), // Migrate removed tools.serena to shared/mcp/serena.md import |
| 75 | getWorkflowRunBranchesCodemod(), // Add default branches to bare on.workflow_run trigger |
| 76 | getCheckoutPersistCredentialsFalseCodemod(), // Add with.persist-credentials: false to actions/checkout steps |
| 77 | getPullRequestTargetCheckoutFalseCodemod(), // Add checkout: false for pull_request_target workflows when safe |
| 78 | getDependabotPermissionsCodemod(), // Add vulnerability-alerts: read when dependabot toolset is used |
| 79 | getGitHubReposToAllowedReposCodemod(), // Rename deprecated tools.github.repos to tools.github.allowed-repos |
| 80 | getCopilotRequestsFeatureToPermissionsCodemod(), // Migrate features.copilot-requests to permissions.copilot-requests |
| 81 | getByokCopilotFeatureRemovalCodemod(), // Remove deprecated features.byok-copilot (Copilot BYOK is default) |
| 82 | getInlineAgentsFeatureRemovalCodemod(), // Remove deprecated features.inline-agents (inline sub-agents now default) |
| 83 | getCliProxyFeatureToGitHubModeCodemod(), // Migrate features.cli-proxy: true to tools.github.mode: gh-proxy |
| 84 | getDIFCProxyToIntegrityProxyCodemod(), // Migrate deprecated features.difc-proxy to tools.github.integrity-proxy |
| 85 | getMountAsCLIsToCLIProxyCodemod(), // Rename tools.mount-as-clis to tools.cli-proxy and remove features.mcp-cli |
| 86 | getSandboxMCPContainerRemovalCodemod(), // Remove deprecated sandbox.mcp.container (now managed internally) |