139 lines
4.0 KiB
YAML
139 lines
4.0 KiB
YAML
repos:
|
|
- repo: local
|
|
hooks:
|
|
- id: validate-commit-msg
|
|
name: validate commit message
|
|
entry: env PYTHONPATH=src .venv/bin/python -m devx.ci.validate_commit_msg
|
|
language: system
|
|
stages: [commit-msg]
|
|
pass_filenames: true
|
|
|
|
- id: lint-ruff
|
|
name: ruff lint
|
|
entry: make lint-ruff
|
|
language: system
|
|
types: [python]
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: lint-format
|
|
name: ruff format check
|
|
entry: make lint-format
|
|
language: system
|
|
types: [python]
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: typecheck
|
|
name: pyright type check
|
|
entry: make typecheck
|
|
language: system
|
|
types: [python]
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: lint-bandit
|
|
name: bandit security scan
|
|
entry: make lint-bandit
|
|
language: system
|
|
types: [python]
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: ansible-lint
|
|
name: ansible-lint
|
|
entry: make ansible-lint
|
|
language: system
|
|
types: [yaml]
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: workflow-lint
|
|
name: actionlint (workflow YAML)
|
|
entry: make workflow-lint
|
|
language: system
|
|
files: ^\.gitea/workflows/
|
|
types: [yaml]
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: checkmake
|
|
name: checkmake Makefile linter
|
|
entry: make checkmake
|
|
language: system
|
|
files: ^Makefile$
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: check-test-speed
|
|
name: unit test speed check
|
|
entry: .venv/bin/python -m devx.tools.check_test_speed --max-seconds 4 --max-single-seconds 0.5
|
|
language: system
|
|
types: [python]
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: check-translations
|
|
name: translation completeness check
|
|
entry: env PYTHONPATH=src .venv/bin/python -m devx.ci.check_translations --translations src/grm/translations.json
|
|
language: system
|
|
files: ^src/grm/translations\.json$
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: docs-check
|
|
name: documentation gate (coverage + stale refs + lint + version refs + prose)
|
|
entry: bash -c 'PYTHONPATH=src DEVX_DOC_COVERAGE_STRICT=1 DEVX_DOC_VERSIONS_PKG=grm DEVX_VALE_LEVEL=warning make devx-docs-check'
|
|
language: system
|
|
pass_filenames: false
|
|
always_run: true
|
|
stages: [pre-commit]
|
|
|
|
- id: pytest-cov
|
|
name: pytest with 100% coverage
|
|
entry: make pytest-cov
|
|
language: system
|
|
types: [python]
|
|
pass_filenames: false
|
|
stages: [pre-push]
|
|
|
|
- id: check-ansible-no-log
|
|
name: ansible no_log on secret tasks
|
|
entry: make check-ansible-no-log
|
|
language: system
|
|
files: ^ansible/.*\.(yml|yaml)$
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: check-ansible-no-state-absent-on-db
|
|
name: no state absent on DB paths
|
|
entry: make check-ansible-no-state-absent-on-db
|
|
language: system
|
|
files: ^ansible/.*\.(yml|yaml)$
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: check-ansible-patterns
|
|
name: ansible failure-masking patterns
|
|
entry: make check-ansible-patterns
|
|
language: system
|
|
files: ^ansible/.*\.(yml|yaml)$
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: check-jinja-expr
|
|
name: jinja2 expression validation
|
|
entry: make check-jinja-expr
|
|
language: system
|
|
files: ^ansible/.*\.(yml|yaml|j2)$
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|
|
|
|
- id: check-ansible-set-fact-to-json
|
|
name: set_fact to_json misuse check
|
|
entry: make check-ansible-set-fact-to-json
|
|
language: system
|
|
files: ^ansible/.*\.(yml|yaml)$
|
|
pass_filenames: false
|
|
stages: [pre-commit]
|