Rules

FP603 · remote-unverified

A job calls a reusable workflow in another repository; its interface is not verified.

Code	Name	Category	Default severity
`FP603`	`remote-unverified`	Graph structure	🔵 info

Why it matters

flowpact analyzes this repository only, so inputs, secrets and outputs of the remote workflow are taken on trust.

Nothing to fix. If the workflow lives in this repository, set repository: owner/repo in the config so it resolves locally.

Change the severity (or turn the rule off) in .github/flowpact/flowpact.config.yml, by code or by name:

.github/flowpact/flowpact.config.yml

rules:
  FP603: off
  # or: remote-unverified: error

Explain it in the terminal:

flowpact explain FP603

FP602 · nesting-depth

A chain of reusable workflow calls is deeper than the configured limit (`limits.nestingDepth`).

FP604 · needs-without-data

A job lists another job under `needs:` but never reads its outputs or result (opt-in).