template_python/.pre-commit-config.yaml at main · lfagotbouquet/template_python · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
# ================================================
# BASE PRE-COMMIT TEMPLATE
# Features:
# - Python linting + formatting (Ruff)
# - Typing checks (Mypy)
# - Security checks (Bandit)
# - Docs build smoke test
# - Commit message enforcement
# - Shell script linting (shfmt + shellcheck)
# - Optional Markdown/YAML/requirements checks
# - Pre-commit.ci integration
# ================================================

default_language_version:
  python: python3

repos:
  # ---------- CORE HYGIENE ----------
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v6.0.0
    hooks:
      - id: trailing-whitespace
        args: [--markdown-linebreak-ext=md]
      - id: end-of-file-fixer
      - id: check-yaml
      - id: check-toml
      - id: check-json
      - id: check-merge-conflict
      - id: detect-private-key
      - id: debug-statements
      - id: check-ast
      - id: check-added-large-files
        args: ["--maxkb=1000"]

  # ---------- PYTHON LINT + FORMAT (Ruff) ----------
  - repo: https://github.com/astral-sh/ruff-pre-commit
    rev: v0.14.13
    hooks:
      - id: ruff
        args: [--fix, --exit-non-zero-on-fix]
        types_or: [python, pyi]

      - id: ruff-format
        types_or: [python, pyi]

  # ---------- TYPES (MYPY) ----------
  - repo: https://github.com/pre-commit/mirrors-mypy
    rev: v1.19.1
    hooks:
      - id: mypy
        name: mypy (deep scan)
        files: ^(src|tests|apps)/
        args:
          - --ignore-missing-imports
          - --no-error-summary
          - --pretty
        additional_dependencies:
          - types-PyYAML
          - types-requests

  # ---------- SECURITY (Bandit) ----------
  - repo: https://github.com/PyCQA/bandit
    rev: 1.9.2
    hooks:
      - id: bandit
        name: bandit (deep scan)
        args:
          - --quiet
          - --confidence-level
          - medium
        files: ^(src|apps)/

  # ---------- DOCS BUILD (SMOKE TEST) ----------
  - repo: local
    hooks:
      - id: docs-build
        name: docs build (smoke)
        entry: uv run mkdocs build --strict
        language: system
        files: ^(docs/|mkdocs\.yml)$
        pass_filenames: false

  # ---------- COMMIT MESSAGE POLICY ----------
  - repo: https://github.com/compilerla/conventional-pre-commit
    rev: v4.3.0
    hooks:
      - id: conventional-pre-commit
        stages: [commit-msg]

  # ---------- SHELL SCRIPTS ----------
  - repo: https://github.com/scop/pre-commit-shfmt
    rev: v3.12.0-2
    hooks:
      - id: shfmt

  - repo: https://github.com/shellcheck-py/shellcheck-py
    rev: v0.10.0.1
    hooks:
      - id: shellcheck
        files: \.sh$

  # ---------- OPTIONAL CHECKS ----------
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v6.0.0
    hooks:
      - id: requirements-txt-fixer
        files: requirements.*\.txt$

  - repo: https://github.com/igorshubovych/markdownlint-cli
    rev: v0.38.0
    hooks:
      - id: markdownlint-fix
        args: [--disable, MD013, MD033, MD041, MD024, --]

  - repo: https://github.com/adrienverge/yamllint
    rev: v1.38.0
    hooks:
      - id: yamllint
        args: [--config-file=.yamllint]

# ---------- CI / PRE-COMMIT.CI CONFIG ----------
ci:
  autofix_commit_msg: |
    [pre-commit.ci] auto fixes from pre-commit.com hooks

    for more information, see https://pre-commit.ci
  autofix_prs: true
  autoupdate_branch: ''
  autoupdate_commit_msg: '[pre-commit.ci] pre-commit autoupdate'
  autoupdate_schedule: weekly
  skip: []
  submodules: true