.pre-commit-config.yaml

---
default_install_hook_types: ["pre-commit", "pre-push"]
default_stages: ["commit", "push"]
minimum_pre_commit_version: 2.18.0
repos:
  # Linting
  - repo: local
    hooks:
      - id: prettier
        name: Prettier
        entry: prettier --write --ignore-unknown
        language: node
        types: [text]
        args: []
        # https://github.com/prettier/prettier/releases
        additional_dependencies: ["prettier@3.3.3"]
        stages: ["commit"]
  # Security
  - repo: https://github.com/Yelp/detect-secrets
    rev: v1.5.0
    hooks:
      - id: detect-secrets
  - repo: https://github.com/gitleaks/gitleaks
    rev: v8.19.3
    hooks:
      - id: gitleaks
  - repo: https://github.com/fabasoad/pre-commit-grype
    rev: v0.6.1
    hooks:
      - id: grype-dir
        args:
          - --grype-args=--by-cve --fail-on=low
          - --hook-args=--log-level debug
        stages: ["push"]
  # Markdown
  - repo: https://github.com/igorshubovych/markdownlint-cli
    rev: v0.42.0
    hooks:
      - id: markdownlint-fix
        stages: ["commit"]
  # Yaml
  - repo: https://github.com/adrienverge/yamllint
    rev: v1.35.1
    hooks:
      - id: yamllint
        stages: ["push"]
  # GitHub Actions
  - repo: https://github.com/rhysd/actionlint
    rev: v1.7.3
    hooks:
      - id: actionlint
        args: ["-pyflakes="]
        stages: ["commit"]
  # Other
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v4.6.0
    hooks:
      - id: check-merge-conflict
      - id: check-json
        stages: ["push"]
      - id: detect-private-key
      - id: end-of-file-fixer
      - id: mixed-line-ending
        args: ["--fix=lf"]
      - id: no-commit-to-branch
        stages: ["commit"]
      - id: trailing-whitespace