.pre-commit-config.yaml

# See https://pre-commit.com for more information
# See https://pre-commit.com/hooks.html for more hooks
default_install_hook_types:
- pre-commit
- pre-push
default_stages:
- pre-commit
repos:
- repo: https://github.com/pre-commit/pre-commit-hooks
  rev: v6.0.0
  hooks:
  - id: trailing-whitespace
  - id: end-of-file-fixer
  - id: check-yaml
    exclude: ^charts/kube-transition-metrics/templates/
  - id: check-added-large-files
- repo: local
  hooks:
  - id: go-mod-tidy
    name: go mod tidy
    entry: go mod tidy
    language: golang
    types:
    - go
    pass_filenames: false
- repo: https://github.com/golangci/golangci-lint
  rev: v2.11.3
  hooks:
  - id: golangci-lint-config-verify
  - id: golangci-lint-full
    args:
    - --timeout
    - 10m
  - id: golangci-lint-fmt
- repo: local
  hooks:
  - id: json-schema-for-humans
    name: json-schema-for-humans
    description: Generate doc/SCHEMA.md with https://github.com/coveooss/json-schema-for-humans
    entry: bash -c 'python -m venv .venv && source .venv/bin/activate && pip install --quiet json-schema-for-humans && generate-schema-doc --config-file .jsfh-conf.yaml internal/logging/schemas doc/SCHEMA.md'
    language: system
    files: internal/logging/schemas
    types:
    - json
  - id: trufflehog
    name: TruffleHog
    description: Detect secrets in your data.
    entry: bash -c 'docker run --rm -v "$PWD:/src" ghcr.io/trufflesecurity/trufflehog:latest git --branch=HEAD file:///src --fail --only-verified'
    language: system
    stages:
    - pre-push
  - id: semgrep
    name: semgrep
    entry: bash -c 'docker run --rm -v "$PWD:/src" returntocorp/semgrep semgrep --config p/ci --error --skip-unknown-extensions'
    language: system
    stages:
    - pre-push