From e3d44d2cc11f396d5abe1d09f92cad9f5c636e10 Mon Sep 17 00:00:00 2001
From: "coderabbitai[bot]"
 <136622811+coderabbitai[bot]@users.noreply.github.com>
Date: Thu, 10 Sep 2026 12:34:16 +0000
Subject: [PATCH] Generate docstrings for PR #772

---
 lib/rules/research_extensions.ex | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/lib/rules/research_extensions.ex b/lib/rules/research_extensions.ex
index 1889213b..2eac987a 100644
--- a/lib/rules/research_extensions.ex
+++ b/lib/rules/research_extensions.ex
@@ -158,9 +158,12 @@ defmodule Hypatia.Rules.ResearchExtensions do
   # ─── RE001: Harden-Runner absent on secrets-touching workflow ─────────
 
   @doc """
-  RE001: Workflow references `${{ secrets.* }}` but does not install
-  `step-security/harden-runner`. Provenance: StepSecurity Harden-Runner
-  deployment guide.
+  RE001: Reports each locally executed workflow job that references
+  `${{ secrets.* }}` without installing `step-security/harden-runner`
+  in that job. Fully commented lines and reusable-only jobs are ignored.
+
+  Each warning points to the first active secret reference in the affected
+  job. Provenance: StepSecurity Harden-Runner deployment guide.
 
   Severity: `:warn`. Action: `:report`.
   """