fullsend/.pre-commit-config.yaml at e44b70f5471f9471f6925162477dd659ccb25c6f · fullsend-ai/fullsend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
default_install_hook_types: [pre-commit, commit-msg]

repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v6.0.0
    hooks:
      - id: check-yaml
        args: ["--unsafe"]
      - id: end-of-file-fixer
      - id: trailing-whitespace
      - id: detect-private-key
        exclude: "internal/layers/secrets_test\\.go$|internal/security/scanner_test\\.go$|internal/dispatch/gcf/provisioner_test\\.go$|internal/cli/mint_test\\.go$|tests/.*test_.*\\.py$"
      - id: check-added-large-files
        args: ["--maxkb=1000"]
      - id: check-merge-conflict
      - id: check-json
      - id: check-toml
      - id: mixed-line-ending

  - repo: https://github.com/jorisroovers/gitlint
    rev: v0.19.1
    hooks:
      - id: gitlint
        stages: [commit-msg]

  - repo: https://github.com/astral-sh/ruff-pre-commit
    rev: v0.15.7
    hooks:
      - id: ruff
        args: [--fix]
      - id: ruff-format

  - repo: local
    hooks:
      - id: ty
        name: ty check
        entry: uvx ty check . --ignore unresolved-import --ignore unresolved-attribute
        language: system
        types: [python]
        pass_filenames: false

  - repo: https://github.com/PyCQA/bandit
    rev: "1.9.4"
    hooks:
      - id: bandit
        args: ["-r", "hack/", "--skip", "B101,B404,B603"]
        pass_filenames: false

  - repo: https://github.com/zricethezav/gitleaks
    rev: v8.30.0
    hooks:
      - id: gitleaks

  - repo: https://github.com/rhysd/actionlint
    rev: v1.7.11
    hooks:
      - id: actionlint
        files: |
          (?x)^(
            \.github/workflows/
            |internal/scaffold/fullsend-repo/\.github/workflows/
            |internal/scaffold/fullsend-repo/templates/
          )
        args:
          - -ignore
          - unexpected key "queue" for "concurrency"
          - -ignore
          - property "workflow_repository" is not defined
          - -ignore
          - SC2016
          - -ignore
          - 'could not read reusable workflow file for "\./\.github/workflows/prioritize\.yml"'
          - -ignore
          - 'could not read reusable workflow file for "\./\.fullsend/\.github/workflows/prioritize\.yml"'

  - repo: local
    hooks:
      - id: go-vet
        name: go vet
        entry: go vet ./...
        language: system
        types: [go]
        pass_filenames: false

      - id: lint-adr-status
        name: lint ADR statuses
        entry: ./hack/lint-adr-status
        language: script
        files: ^docs/ADRs/.*\.md$
        pass_filenames: false

      - id: lint-adr-numbers
        name: lint ADR numbers
        entry: ./hack/lint-adr-numbers
        language: script
        files: ^docs/ADRs/.*\.md$
        pass_filenames: false

      - id: lint-adr-frontmatter
        name: lint ADR frontmatter
        entry: ./hack/lint-adr-frontmatter
        language: python
        additional_dependencies: ["pyyaml>=6.0"]
        files: ^docs/ADRs/.*\.md$
        pass_filenames: false

      - id: lint-broken-symlinks
        name: lint broken symlinks
        entry: ./hack/lint-broken-symlinks
        language: script
        pass_filenames: false
        always_run: true

      - id: lint-md-links
        name: lint markdown links
        entry: lychee --offline --no-progress --include-fragments --exclude-path node_modules --exclude-path experiments '**/*.md'
        language: system
        pass_filenames: false
        always_run: true

      - id: lint-workflow-size
        name: lint workflow file size
        entry: ./hack/lint-workflow-size
        language: script
        files: ^internal/scaffold/fullsend-repo/(\.github/workflows/|templates/)
        pass_filenames: false

      - id: lint-agent-docs
        name: lint agent doc references
        entry: ./hack/lint-agent-docs
        language: script
        files: ^(internal/scaffold/fullsend-repo/harness/|docs/agents/)
        pass_filenames: false