mirror of
https://github.com/trustedsec/hate_crack.git
synced 2026-07-28 14:47:22 -07:00
Justin BollingerandClaude Opus 4.7
f3b6e04a3b
ty 0.0.63 changed two things that broke CI on this bump: - new rules (unsupported-operator, no-matching-overload, invalid-assignment, unresolved-global) are error-severity by default and fire on the same legacy module-globals pattern in hate_crack/main.py the existing "warn" rules were pinned for; downgrade them to match. - default exit behaviour now fails on warning-level diagnostics; pass --exit-zero-on-warning to ty check in CI and in the pre-push prek hook to restore the prior fail-only-on-errors semantics. No source changes; deferring the main.py globals refactor. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
85 lines
1.9 KiB
TOML
85 lines
1.9 KiB
TOML
[[repos]]
|
|
repo = "local"
|
|
|
|
[[repos.hooks]]
|
|
id = "ruff"
|
|
name = "ruff"
|
|
entry = "uv run ruff check hate_crack"
|
|
language = "system"
|
|
stages = ["pre-push"]
|
|
pass_filenames = false
|
|
always_run = true
|
|
|
|
[[repos.hooks]]
|
|
id = "ruff-format"
|
|
name = "ruff-format"
|
|
entry = "uv run ruff format --check hate_crack"
|
|
language = "system"
|
|
stages = ["pre-push"]
|
|
pass_filenames = false
|
|
always_run = true
|
|
|
|
[[repos.hooks]]
|
|
id = "ty"
|
|
name = "ty"
|
|
entry = "uv run ty check --exit-zero-on-warning hate_crack"
|
|
language = "system"
|
|
stages = ["pre-push"]
|
|
pass_filenames = false
|
|
always_run = true
|
|
|
|
[[repos.hooks]]
|
|
id = "pytest"
|
|
name = "pytest"
|
|
entry = "env HATE_CRACK_SKIP_INIT=1 uv run pytest -q"
|
|
language = "system"
|
|
stages = ["pre-push"]
|
|
pass_filenames = false
|
|
always_run = true
|
|
|
|
[[repos.hooks]]
|
|
id = "pytest-lima"
|
|
name = "pytest-lima"
|
|
entry = "uv run pytest tests/test_lima_vm_install.py -v"
|
|
language = "system"
|
|
stages = ["pre-push"]
|
|
pass_filenames = false
|
|
always_run = true
|
|
|
|
[[repos.hooks]]
|
|
id = "bandit"
|
|
name = "bandit security scan (vs baseline)"
|
|
entry = "uvx --from 'bandit[toml]==1.9.4' bandit -r hate_crack -c pyproject.toml -b .bandit-baseline.json -q"
|
|
language = "system"
|
|
stages = ["pre-push"]
|
|
pass_filenames = false
|
|
always_run = true
|
|
|
|
# General hygiene hooks (mirrors hashview's .pre-commit-config.yaml). These run
|
|
# at the pre-commit stage, so `prek install` must include `--hook-type pre-commit`.
|
|
# Auto-fixers modify files in place; re-stage and commit again.
|
|
[[repos]]
|
|
repo = "https://github.com/pre-commit/pre-commit-hooks"
|
|
rev = "v5.0.0"
|
|
|
|
[[repos.hooks]]
|
|
id = "trailing-whitespace"
|
|
|
|
[[repos.hooks]]
|
|
id = "end-of-file-fixer"
|
|
|
|
[[repos.hooks]]
|
|
id = "check-yaml"
|
|
|
|
[[repos.hooks]]
|
|
id = "check-merge-conflict"
|
|
|
|
[[repos.hooks]]
|
|
id = "check-added-large-files"
|
|
args = ["--maxkb=1024"]
|
|
|
|
# Blocks committing PEM/OpenSSH private keys. The repo had no secret-scanning
|
|
# gate at all before this; bandit only covers hate_crack/.
|
|
[[repos.hooks]]
|
|
id = "detect-private-key"
|