Rules

FP203 · unused-secret

A `workflow_call` secret is declared but never read.

Code	Name	Category	Default severity
`FP203`	`unused-secret`	Secrets	🟡 warning

Why it matters

Every caller must still wire the secret, widening its exposure for nothing.

Remove the declaration and the callers’ secrets: bindings, or use the secret where intended.

Change the severity (or turn the rule off) in .github/flowpact/flowpact.config.yml, by code or by name:

.github/flowpact/flowpact.config.yml

rules:
  FP203: off
  # or: unused-secret: error

Explain it in the terminal:

flowpact explain FP203

FP202 · unknown-secret

A caller passes a secret the reusable workflow does not declare.

FP204 · secrets-inherit

`secrets: inherit` hands every repository secret to the callee; flowpact lists what is actually needed.