From da3deec3e0bd126a4b22d186542027aed20e30bc Mon Sep 17 00:00:00 2001
From: James Maguire <james.maguire@moia.io>
Date: Fri, 21 Aug 2026 08:47:15 +0200
Subject: [PATCH] chore: Remove stale `paramcheck` allowlist entries

`ActionsVariable` and `DependabotEncryptedSecret` are no longer used as
request body types, so their `body-allowed-pointer-types` exceptions (whose
header says "TODO: fix and remove these exceptions") are dead.

Verified that `custom-gcl` reports no `paramcheck` findings with each entry
removed individually, confirming nothing still passes them as a request body.

Updates #3644
---
 .golangci.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.golangci.yml b/.golangci.yml
index 8aa45461ef1..9d1a6fc9c35 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -203,7 +203,6 @@ linters:
           # Body type names exempt from the "pass by value, not by pointer" rule.
           # TODO: fix and remove these exceptions.
           body-allowed-pointer-types:
-            - ActionsVariable
             - AddProjectItemOptions
             - AuthorizationRequest
             - CodeScanningAlertState
@@ -218,7 +217,6 @@ linters:
             - CustomDeploymentProtectionRuleRequest
             - CustomProperty
             - DependabotAlertState
-            - DependabotEncryptedSecret
             - DependencyGraphSnapshot
             - EncryptedSecret
             - EnterpriseSecurityAnalysisSettings