phylum-ci/.pre-commit-config.yaml at main · phylum-dev/phylum-ci · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
# This is the config for using `pre-commit` on this repository.
#
# See https://pre-commit.com for more information
# See https://pre-commit.com/hooks.html for more hooks
#
# NOTE: Individual hook revisions are kept up to date automatically with the `auto_updates` workflow, which
#       bumps hooks to the latest tag. That workflow manually specifies every repository except for `poetry`
#       since it sometimes specifies the most recent tag on a stable version branch instead of the default branch.
# NOTE: New repos added here should also be added to the `auto_updates` workflow.
---
repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # frozen: v6.0.0
    hooks:
      - id: trailing-whitespace
        exclude_types: [svg]
      - id: end-of-file-fixer
      - id: check-yaml
      - id: check-added-large-files
      - id: check-case-conflict
      - id: check-merge-conflict
      - id: check-toml
      - id: no-commit-to-branch

  - repo: https://github.com/psf/black
    rev: 87928e6d6761a4a6d22250e1fee5601b3998086e  # frozen: 26.5.1
    hooks:
      - id: black

  - repo: https://github.com/charliermarsh/ruff-pre-commit
    rev: 1f1e8bf348ff38fc88619a38d3ca4d9c56abea49  # frozen: v0.16.5
    hooks:
      - id: ruff-check

  - repo: https://github.com/dosisod/refurb
    rev: 0dbb127465ca9398b6c89c32a7fd86d78ca755c4  # frozen: v2.3.1
    hooks:
      - id: refurb

  - repo: https://github.com/jendrikseipp/vulture
    rev: 258fe6a1974e89a2add9a45519a9e9dd9f46154e  # frozen: v2.16
    hooks:
      - id: vulture

  - repo: https://github.com/adrienverge/yamllint
    rev: cba56bcde1fdd01c1deb3f945e69764c291a6530  # frozen: v1.38.0
    hooks:
      - id: yamllint

  - repo: https://github.com/python-poetry/poetry
    # NOTE: The frozen version here may not always be the latest version:
    # https://python-poetry.org/docs/pre-commit-hooks/#why-does-pre-commit-autoupdate-not-update-to-the-latest-version
    # NOTE: This `rev` should be manually updated whenever `poetry` is updated. The `rev` can be found by checking out
    #       the `poetry` repository and running the command: `git show-ref --tags <tag_name>`
    rev: b9e5d79fc57de2f2e60973019d56662b7398440b # frozen: 2.2.1
    hooks:
      - id: poetry-check
        args: [--lock, --strict]

  # NOTE: Don't use this config for your own repositories. Instead, see
  #       "Git pre-commit Integration" at https://docs.phylum.io/phylum-ci/git_precommit
  - repo: local
    hooks:
      - id: phylum-ci
        name: analyze dependencies with phylum-ci
        language: system
        files: ^poetry\.lock$
        entry: poetry run phylum-ci -vv