pre-commit

pip install pre-commit

pre-commit install

---
default_install_hook_types:
  - pre-commit
  - commit-msg
  - pre-push
default_stages: [commit]
repos:
  # ========================================================
  # = Base
  # ========================================================
  # - repo: meta
  #   hooks:
  #     - id: check-hooks-apply
  #     - id: check-useless-excludes
  - repo: https://github.com/commitizen-tools/commitizen
    rev: 3.5.3
    hooks:
      - id: commitizen
        stages: [commit-msg]
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v4.4.0
    hooks:
      - id: check-added-large-files
      - id: check-json
      - id: check-yaml
        args:
          - "--allow-multiple-documents"
      - id: detect-private-key
      - id: end-of-file-fixer
      - id: trailing-whitespace
        args:
          - "--markdown-linebreak-ext=md"
  - repo: https://github.com/streetsidesoftware/cspell-cli
    rev: v6.31.0
    hooks:
      - id: cspell
        args:
          - "--config cspell.config.yaml"
  - repo: https://github.com/pre-commit/mirrors-prettier
    rev: "v3.0.0"
    hooks:
      - id: prettier
        stages: [pre-commit]
  # ========================================================
  # = Secret
  # ========================================================
  - repo: local
    hooks:
      - id: secretlint
        name: secretlint
        language: docker_image
        entry: secretlint/secretlint:latest secretlint
  # ========================================================
  # = Markdown
  # ========================================================
  - repo: https://github.com/thlorenz/doctoc
    rev: v2.2.0
    hooks:
      - id: doctoc
  - repo: https://github.com/igorshubovych/markdownlint-cli
    rev: v0.35.0
    hooks:
      - id: markdownlint
        args: ["--disable", "MD013", "MD033", "MD034", "--"]
  # ========================================================
  # = yaml
  # ========================================================
  - repo: https://github.com/adrienverge/yamllint.git
    rev: v1.32.0
    hooks:
      - id: yamllint
        # files: (\.yaml|\.yml)$
  # ========================================================
  # = Shell
  # ========================================================
  - repo: https://github.com/koalaman/shellcheck-precommit
    rev: v0.9.0
    hooks:
      - id: shellcheck
  # ========================================================
  # = Docker container
  # ========================================================
  - repo: https://github.com/hadolint/hadolint.git
    rev: v2.12.0
    hooks:
      - id: hadolint-docker
        entry: hadolint/hadolint hadolint
  # ========================================================
  # = Terraform
  # ========================================================
  - repo: local
    hooks:
      - id: terraform-fmt
        name: Terraform fmt
        language: docker_image
        entry: -v "./:/data" -w /data hashicorp/terraform:latest
        args: ["fmt", "-recursive"]
        pass_filenames: false
        files: (\.tf|\.tfvars)$
        exclude: \.terraform\/.*$
      - id: terraform-docs
        name: Terraform docs
        language: docker_image
        entry: quay.io/terraform-docs/terraform-docs:latest
        args: ["/src/"]
        pass_filenames: false
        files: (\.tf|\.terraform\.lock\.hcl)$
        exclude: \.terraform\/.*$
      - id: terraform-lint
        name: Terraform lint
        language: docker_image
        entry: ghcr.io/terraform-linters/tflint:latest
        args:
          [
            "--chdir=/src/",
            "--disable-rule=terraform_deprecated_interpolation",
          ]
        pass_filenames: false
        files: (\.tf|\.tfvars)$
        exclude: \.terraform\/.*$
      - id: terraform-tfsec
        name: Terraform tfsec eks cluster
        language: docker_image
        entry: aquasec/tfsec:latest
        args: ["/src/"]
        pass_filenames: false
  # ========================================================
  # = IAC
  # ========================================================
  - repo: local
    hooks:
      - id: iac-checkov
        name: IAC checkov eks cluster
        language: docker_image
        entry: bridgecrew/checkov:latest
        args: ["--directory", "/src/", "--quiet"]
        pass_filenames: false

pre-commit run $PRE-COMMIT_ID

pre-commit run -a

pre-commit autoupdate

git commit --no-verify -m "$COMMIT_MESSAGE"