.pre-commit-config.yaml

# See https://pre-commit.com for more information
# See https://pre-commit.com/hooks.html for more hooks
default_language_version:
  python: python3.11
repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v4.6.0
    hooks:
      - id: check-added-large-files
      - id: check-ast
      - id: check-docstring-first
      - id: check-executables-have-shebangs
      - id: check-merge-conflict
      - id: check-shebang-scripts-are-executable
      - id: check-symlinks
      - id: check-xml
      - id: check-yaml
        args: [ --allow-multiple-documents ]
      - id: destroyed-symlinks
      - id: detect-private-key
      - id: end-of-file-fixer
      - id: pretty-format-json
        args: [ '--no-sort-keys' ]
      - id: requirements-txt-fixer
      - id: trailing-whitespace
      - id: detect-aws-credentials
        args: [ --allow-missing-credentials ]
  - repo: https://github.com/bwhmather/ssort
    rev: 0.13.0
    hooks:
      - id: ssort
  - repo: https://github.com/charliermarsh/ruff-pre-commit
    # Ruff version.
    rev: 'v0.4.8'
    hooks:
      - id: ruff
        args: [ --fix]
      - id: ruff-format
  - repo: https://github.com/myint/docformatter
    rev: "v1.7.5"
    hooks:
      - id: docformatter
        args: [ --in-place ]
  - repo: https://github.com/Lucas-C/pre-commit-hooks-safety
    rev: "v1.3.3"
    hooks:
      - id: python-safety-dependencies-check
  - repo: https://github.com/gitleaks/gitleaks
    rev: v8.18.3
    hooks:
      - id: gitleaks
  - repo: https://github.com/returntocorp/semgrep # semgrep does not support linux arm64
    rev: 'v1.73.0'
    hooks:
      - id: semgrep
        # See semgrep.dev/rulesets to select a ruleset and copy its URL
        exclude: "cdk/config/config-ci-cd.yaml|cdk.context.json"
        args: [
        '--config', 'p/python',
        '--config', 'p/default',
        '--error',
        '--skip-unknown-extensions',
        ]