.pre-commit-config.yaml

repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v5.0.0
    hooks:
      - id: trailing-whitespace
      - id: end-of-file-fixer
      - id: check-added-large-files
      - id: check-merge-conflict
      - id: check-symlinks
      - id: check-yaml
      - id: detect-private-key
  - repo: https://github.com/jumanjihouse/pre-commit-hooks
    rev: 3.0.0  # or specific git tag
    hooks:
      - id: shellcheck
        args:
          - "-e"
          - "SC1090"
          - "-e"
          - "SC1091"
  - repo: https://github.com/hadolint/hadolint
    rev: "v2.12.0"
    hooks:
      - id: hadolint-docker
        args:
          - --ignore
          - DL4006
          - --ignore
          - DL3015
  - repo: https://github.com/sirosen/check-jsonschema
    rev: 0.30.0
    hooks:
      - id: check-github-workflows

  - repo: https://github.com/Yelp/detect-secrets
    rev: v1.5.0
    hooks:
      - id: detect-secrets
        name: Detect secrets
        description: Detects high entropy strings that are likely to be passwords.
        entry: detect-secrets-hook
        language: python
        # for backward compatibility
        files: .*  # all files