.pre-commit-config.yaml

exclude: '\.git|log'
fail_fast: false
repos:
- repo: https://github.com/pre-commit/pre-commit-hooks
  rev: v4.3.0
  hooks:
  - id: check-added-large-files
    args: [--enforce-all]
  - id: check-case-conflict
  - id: check-docstring-first
  - id: check-executables-have-shebangs
  - id: check-merge-conflict
    args: [--assume-in-merge]
  - id: check-shebang-scripts-are-executable
  - id: check-symlinks
  - id: check-toml
  - id: check-vcs-permalinks
  - id: check-yaml
    args: [--allow-multiple-documents]
  - id: destroyed-symlinks
  - id: detect-private-key
  - id: end-of-file-fixer
  - id: fix-byte-order-marker
  - id: mixed-line-ending
  - id: trailing-whitespace
- repo: local
  hooks:
  - id: gitleaks
    name: Detect hardcoded secrets
    description: Detect hardcoded secrets using Gitleaks
    entry: gitleaks protect --verbose --redact --staged
    language: golang
    pass_filenames: false
# - repo: https://github.com/antonbabenko/pre-commit-terraform
# rev: v1.75.0
# hooks:
# - id: infracost_breakdown
#   verbose: true
# - id: terraform_docs
#   args:
#   - --hook-config=--path-to-file=README.md
#   - --hook-config=--add-to-existing-file=true
#   - --hook-config=--create-file-if-not-exist=true
# - id: terraform_providers_lock
#   args: [--tf-init-args=-upgrade]
# - id: terraform_tfsec