fullsend/.pre-commit-config.yaml at aa78c67fd3d620e91df507b2355a6d8fbed6ec1d · guyoron1/fullsend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
default_install_hook_types: [pre-commit, commit-msg]

repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v6.0.0
    hooks:
      - id: check-yaml
        args: ["--unsafe"]
      - id: end-of-file-fixer
      - id: trailing-whitespace
      - id: detect-private-key
        exclude: "internal/layers/secrets_test\\.go$|internal/security/scanner_test\\.go$|internal/dispatch/gcf/provisioner_test\\.go$|internal/cli/mint_test\\.go$|tests/.*test_.*\\.py$"
      - id: check-added-large-files
        args: ["--maxkb=1000"]
      - id: check-merge-conflict
      - id: check-json
      - id: check-toml
      - id: mixed-line-ending

  - repo: https://github.com/jorisroovers/gitlint
    rev: v0.19.1
    hooks:
      - id: gitlint
        stages: [commit-msg]

  - repo: https://github.com/astral-sh/ruff-pre-commit
    rev: v0.15.7
    hooks:
      - id: ruff
        args: [--fix]
      - id: ruff-format

  - repo: local
    hooks:
      - id: ty
        name: ty check
        entry: uvx ty check . --ignore unresolved-import --ignore unresolved-attribute
        language: system
        types: [python]
        pass_filenames: false

  - repo: https://github.com/PyCQA/bandit
    rev: "1.9.4"
    hooks:
      - id: bandit
        args: ["-r", "hack/", "--skip", "B101,B404,B603"]
        pass_filenames: false

  - repo: https://github.com/zricethezav/gitleaks
    rev: v8.30.0
    hooks:
      - id: gitleaks

  - repo: https://github.com/shellcheck-py/shellcheck-py
    rev: v0.10.0.1
    hooks:
      - id: shellcheck
        args: ["-x", "-e", "SC1091,SC2001,SC2016"]

  - repo: https://github.com/rhysd/actionlint
    rev: v1.7.11
    hooks:
      - id: actionlint
        files: |
          (?x)^(
            \.github/workflows/
            |internal/scaffold/fullsend-repo/\.github/workflows/
            |internal/scaffold/fullsend-repo/templates/
          )
        args:
          - -ignore
          - unexpected key "queue" for "concurrency"
          - -ignore
          - property "workflow_repository" is not defined
          - -ignore
          - SC2016
          - -ignore
          - '__REUSABLE_(WORKFLOW|DISPATCH)__'

  - repo: local
    hooks:
      - id: go-fmt
        name: gofmt
        entry: gofmt -w
        language: system
        types: [go]

      - id: go-vet
        name: go vet
        entry: go vet ./...
        language: system
        types: [go]
        pass_filenames: false

      - id: lint-mint-embed-sync
        name: lint mint embed sync
        entry: ./hack/lint-mint-embed-sync
        language: script
        files: ^(internal/mint/|internal/mintcore/|internal/dispatch/gcf/mintsrc/)
        pass_filenames: false

      - id: lint-adr-status
        name: lint ADR statuses
        entry: ./hack/lint-adr-status
        language: script
        files: ^docs/ADRs/.*\.md$
        pass_filenames: false

      - id: lint-adr-numbers
        name: lint ADR numbers
        entry: ./hack/lint-adr-numbers
        language: script
        files: ^docs/ADRs/.*\.md$
        pass_filenames: false

      - id: lint-adr-frontmatter
        name: lint ADR frontmatter
        entry: ./hack/lint-adr-frontmatter
        language: python
        additional_dependencies: ["pyyaml>=6.0"]
        files: ^docs/ADRs/.*\.md$
        pass_filenames: false

      - id: lint-broken-symlinks
        name: lint broken symlinks
        entry: ./hack/lint-broken-symlinks
        language: script
        pass_filenames: false
        always_run: true

      - id: lint-md-links
        name: lint markdown links
        entry: lychee --offline --no-progress --include-fragments --exclude-path node_modules --exclude-path experiments '**/*.md'
        language: system
        pass_filenames: false
        always_run: true

      - id: lint-workflow-size
        name: lint workflow file size
        entry: ./hack/lint-workflow-size
        language: script
        files: ^internal/scaffold/fullsend-repo/(\.github/workflows/|templates/)
        pass_filenames: false

      - id: lint-agent-docs
        name: lint agent doc references
        entry: ./hack/lint-agent-docs
        language: script
        files: ^(internal/scaffold/fullsend-repo/harness/|docs/agents/)
        pass_filenames: false