Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2024-12-13 18:04:36 -05:00
Code Issues Packages Projects Releases Wiki Activity
076a242b55
qusal/.pre-commit-config.yaml

125 lines
3.5 KiB
YAML
Raw Normal View History

ci: lint YAML and spell check code
2024-07-08 05:12:38 -04:00
# yamllint disable-line rule:line-length
doc: lint markdown files Only way to have a unified markdown syntax is to enforce the wanted syntax by linting the files. Don't rely on the many markdown syntaxes, be consistent.
2024-07-04 11:10:11 -04:00
# SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
refactor: initial commit
2023-11-13 09:33:28 -05:00
#
doc: lint markdown files Only way to have a unified markdown syntax is to enforce the wanted syntax by linting the files. Don't rely on the many markdown syntaxes, be consistent.
2024-07-04 11:10:11 -04:00
# SPDX-License-Identifier: AGPL-3.0-or-later
refactor: initial commit
2023-11-13 09:33:28 -05:00
---
feat: enable all optional shellcheck validations Make shell a little bit safer with: - add-default-case - check-extra-masked-returns - check-set-e-suppressed - quote-safe-variables - check-unassigned-uppercase Although there are some stylistic decisions for uniformity: - avoid-nullary-conditions - deprecated-which - require-variable-braces
2024-07-10 08:36:05 -04:00
default_install_hook_types:
- pre-commit
refactor: initial commit
2023-11-13 09:33:28 -05:00
repos:
feat: enable all optional shellcheck validations Make shell a little bit safer with: - add-default-case - check-extra-masked-returns - check-set-e-suppressed - quote-safe-variables - check-unassigned-uppercase Although there are some stylistic decisions for uniformity: - avoid-nullary-conditions - deprecated-which - require-variable-braces
2024-07-10 08:36:05 -04:00
refactor: initial commit
2023-11-13 09:33:28 -05:00
- repo: local
hooks:
feat: print hex of unicode Useful to detect unwanted characters in third party contributions patches using a CI hook.
2024-03-14 07:09:49 -04:00
fix: uniform lint scripts name
2024-07-10 09:06:11 -04:00
- id: unicode-lint
name: unicode-lint
entry: scripts/unicode-lint.sh
feat: print hex of unicode Useful to detect unwanted characters in third party contributions patches using a CI hook.
2024-03-14 07:09:49 -04:00
language: script
pass_filenames: true
description: Prohibit Unicode
feat: verify commit signature before push Check commit signature and if it fails, check if any signed tags associated with commit exist from a keyring that can be found only locally. For: https://github.com/ben-grande/qusal/issues/105
2024-10-25 05:18:52 -04:00
stages: [commit]
feat: print hex of unicode Useful to detect unwanted characters in third party contributions patches using a CI hook.
2024-03-14 07:09:49 -04:00
ci: lint YAML and spell check code
2024-07-08 05:12:38 -04:00
- id: spell-lint
name: spell-lint
entry: scripts/spell-lint.sh
language: script
pass_filenames: true
description: Spellcheck files
feat: verify commit signature before push Check commit signature and if it fails, check if any signed tags associated with commit exist from a keyring that can be found only locally. For: https://github.com/ben-grande/qusal/issues/105
2024-10-25 05:18:52 -04:00
stages: [commit]
ci: lint YAML and spell check code
2024-07-08 05:12:38 -04:00
perf: make pre-commit hooks pass file extensions - shell-lint: faster evaluation of shell scripts, hook 40% faster; - *-lint: unify method to find the "find" utility; and - pre-commit: pass file extensions to lint tools.
2024-07-06 16:25:54 -04:00
- id: shell-lint
name: shell-lint
entry: scripts/shell-lint.sh
language: script
pass_filenames: true
ci: lint editorconfig checker
2024-07-08 11:06:00 -04:00
# yamllint disable rule:line-length
style: limit line length per file extension Editorconfig can only act based on file extension and path, not attributes, it remains a mean only for multiple collaborators to use the same configuration on their editor. When it is too restrictive, such as not considering the file syntax, use a lint tool for the specific file type instead of trusting editorconfig. Changes were made to increase readability.
2024-07-09 11:42:07 -04:00
files: >-
(\.sh|/rc\.local\.d/.*\.rc|/bin/.*|/rpc/.*|/network-hooks\.d/.*|
/qubes-firewall\.d/.*|/(lib-)?qubes-bind-dirs\.d/.*|
/\.config/(sh|bash|zsh|less|x11|git/shell|git/template/hooks)/.*|
/autostart-scripts/.*|/qvm-copy-dotfiles|/git-core/.*)
ci: lint editorconfig checker
2024-07-08 11:06:00 -04:00
# yamllint disable rule:line-length
style: limit line length per file extension Editorconfig can only act based on file extension and path, not attributes, it remains a mean only for multiple collaborators to use the same configuration on their editor. When it is too restrictive, such as not considering the file syntax, use a lint tool for the specific file type instead of trusting editorconfig. Changes were made to increase readability.
2024-07-09 11:42:07 -04:00
exclude: >-
\.(policy|asc|txt|top|sls|jinja|toml|vim|py|muttrc|nft|md|spec|
list|sources|repo|socket|timer|service|y(a)?ml)$
perf: make pre-commit hooks pass file extensions - shell-lint: faster evaluation of shell scripts, hook 40% faster; - *-lint: unify method to find the "find" utility; and - pre-commit: pass file extensions to lint tools.
2024-07-06 16:25:54 -04:00
description: Lint Shellscripts
feat: verify commit signature before push Check commit signature and if it fails, check if any signed tags associated with commit exist from a keyring that can be found only locally. For: https://github.com/ben-grande/qusal/issues/105
2024-10-25 05:18:52 -04:00
stages: [commit]
feat: print hex of unicode Useful to detect unwanted characters in third party contributions patches using a CI hook.
2024-03-14 07:09:49 -04:00
doc: lint markdown files Only way to have a unified markdown syntax is to enforce the wanted syntax by linting the files. Don't rely on the many markdown syntaxes, be consistent.
2024-07-04 11:10:11 -04:00
- id: markdown-lint
name: markdown-lint
entry: scripts/markdown-lint.sh
language: script
pass_filenames: true
perf: make pre-commit hooks pass file extensions - shell-lint: faster evaluation of shell scripts, hook 40% faster; - *-lint: unify method to find the "find" utility; and - pre-commit: pass file extensions to lint tools.
2024-07-06 16:25:54 -04:00
files: \.md$
doc: spell check
2024-07-08 05:41:45 -04:00
description: Lint Markdown files
feat: verify commit signature before push Check commit signature and if it fails, check if any signed tags associated with commit exist from a keyring that can be found only locally. For: https://github.com/ben-grande/qusal/issues/105
2024-10-25 05:18:52 -04:00
stages: [commit]
doc: lint markdown files Only way to have a unified markdown syntax is to enforce the wanted syntax by linting the files. Don't rely on the many markdown syntaxes, be consistent.
2024-07-04 11:10:11 -04:00
feat: lint python files
2024-07-05 06:24:24 -04:00
- id: python-lint
name: python-lint
entry: scripts/python-lint.sh
language: script
pass_filenames: true
perf: make pre-commit hooks pass file extensions - shell-lint: faster evaluation of shell scripts, hook 40% faster; - *-lint: unify method to find the "find" utility; and - pre-commit: pass file extensions to lint tools.
2024-07-06 16:25:54 -04:00
files: \.py$
doc: spell check
2024-07-08 05:41:45 -04:00
description: Lint Python files
feat: verify commit signature before push Check commit signature and if it fails, check if any signed tags associated with commit exist from a keyring that can be found only locally. For: https://github.com/ben-grande/qusal/issues/105
2024-10-25 05:18:52 -04:00
stages: [commit]
feat: lint python files
2024-07-05 06:24:24 -04:00
refactor: initial commit
2023-11-13 09:33:28 -05:00
- id: salt-lint
name: salt-lint
entry: scripts/salt-lint.sh
language: script
pass_filenames: true
fix: lint all Salt file extensions
2024-07-18 06:23:38 -04:00
files: (^minion.d/.*.conf|\.(sls|top|jinja|j2|tmpl|tst))$
refactor: initial commit
2023-11-13 09:33:28 -05:00
description: Lint Salt files
feat: verify commit signature before push Check commit signature and if it fails, check if any signed tags associated with commit exist from a keyring that can be found only locally. For: https://github.com/ben-grande/qusal/issues/105
2024-10-25 05:18:52 -04:00
stages: [commit]
feat: print hex of unicode Useful to detect unwanted characters in third party contributions patches using a CI hook.
2024-03-14 07:09:49 -04:00
ci: lint YAML and spell check code
2024-07-08 05:12:38 -04:00
- id: yaml-lint
name: yaml-lint
entry: scripts/yaml-lint.sh
language: script
pass_filenames: true
files: \.(yaml|yml)$
description: Lint YAML files
feat: verify commit signature before push Check commit signature and if it fails, check if any signed tags associated with commit exist from a keyring that can be found only locally. For: https://github.com/ben-grande/qusal/issues/105
2024-10-25 05:18:52 -04:00
stages: [commit]
ci: lint YAML and spell check code
2024-07-08 05:12:38 -04:00
ci: pass pre-commit script argument on its own key
2024-06-22 03:04:18 -04:00
- id: qubesbuilder-gen
name: qubesbuilder-gen
entry: scripts/qubesbuilder-gen.sh
args: [test]
feat: build and sign RPM packages Passing files to Dom0 is always dangerous: - Passing a git repository is dangerous as it can have ignored modified files and signature verification will pass. - Passing an archive is troublesome for updates. - Passing an RPM package depends on the RPM verification to be correct, some times it is not. - Passing a RPM repository definition is less troublesome for the user, as it is a small file to verify the contents and update mechanism is via the package manager. Trust in RPM verification is still required. Many improvements were made to the build scripts: - requires-program: Single function to check if program is installed; - spec-get: Sort project names for the usage message; - spec-get: Only running commands that are necessary; - spec-get: Fix empty summary when readme has copyright header; - spec-gen: Fix grep warning of escaped symbol; - spec-build: Sign RPM and verify signature; - spec-build: Only lint the first SPEC for faster runtime; - yumrepo-gen: Generate a local yum repository with signed metadata; - qubesbuilder-gen: Generate a .qubesbuilder based on tracked projects; - release: Build, sign and push all RPMs to repository. Goal is to be able to build with qubes-builderv2 Qubes Executor. For: https://github.com/ben-grande/qusal/issues/37
2024-06-12 08:44:04 -04:00
language: script
ci: pass pre-commit script argument on its own key
2024-06-22 03:04:18 -04:00
pass_filenames: false
ci: lint editorconfig checker
2024-07-08 11:06:00 -04:00
files: salt/\S+/README.md
feat: build and sign RPM packages Passing files to Dom0 is always dangerous: - Passing a git repository is dangerous as it can have ignored modified files and signature verification will pass. - Passing an archive is troublesome for updates. - Passing an RPM package depends on the RPM verification to be correct, some times it is not. - Passing a RPM repository definition is less troublesome for the user, as it is a small file to verify the contents and update mechanism is via the package manager. Trust in RPM verification is still required. Many improvements were made to the build scripts: - requires-program: Single function to check if program is installed; - spec-get: Sort project names for the usage message; - spec-get: Only running commands that are necessary; - spec-get: Fix empty summary when readme has copyright header; - spec-gen: Fix grep warning of escaped symbol; - spec-build: Sign RPM and verify signature; - spec-build: Only lint the first SPEC for faster runtime; - yumrepo-gen: Generate a local yum repository with signed metadata; - qubesbuilder-gen: Generate a .qubesbuilder based on tracked projects; - release: Build, sign and push all RPMs to repository. Goal is to be able to build with qubes-builderv2 Qubes Executor. For: https://github.com/ben-grande/qusal/issues/37
2024-06-12 08:44:04 -04:00
description: Check if .qubesbuilder is up to date
feat: verify commit signature before push Check commit signature and if it fails, check if any signed tags associated with commit exist from a keyring that can be found only locally. For: https://github.com/ben-grande/qusal/issues/105
2024-10-25 05:18:52 -04:00
stages: [commit]
fix: generate RPM Specs for Qubes Builder V2 It doesn't checkout the current directory when querying the spec, so we provide the already modified version of the spec.
2024-06-21 11:00:06 -04:00
fix: skip RPM Spec hook If the commit of the spec file is not done separate from formula files or at last, the check fails. I was skipping it locally but best to comment out as it is not being used.
2024-08-16 05:59:49 -04:00
# - id: spec-gen
# name: spec-gen
# language: script
# entry: scripts/spec-gen.sh
# args: [test]
# pass_filenames: true
# # yamllint disable rule:line-length
# files: >-
# ^(rpm_spec/template/template.spec|salt/.*|
# scripts/spec-(get|gen)\.sh)$
# description: Check if RPM SPEC files are up to date
feat: verify commit signature before push Check commit signature and if it fails, check if any signed tags associated with commit exist from a keyring that can be found only locally. For: https://github.com/ben-grande/qusal/issues/105
2024-10-25 05:18:52 -04:00
# stages: [commit]
feat: lint python files
2024-07-05 06:24:24 -04:00
ci: check if RPM Specs are up to date
2024-07-08 09:21:49 -04:00
- id: license-lint
name: license-lint
perf: make pre-commit hooks pass file extensions - shell-lint: faster evaluation of shell scripts, hook 40% faster; - *-lint: unify method to find the "find" utility; and - pre-commit: pass file extensions to lint tools.
2024-07-06 16:25:54 -04:00
entry: reuse
args: [lint]
language: python
pass_filenames: false
description: Lint files to comply with the REUSE Specification
feat: verify commit signature before push Check commit signature and if it fails, check if any signed tags associated with commit exist from a keyring that can be found only locally. For: https://github.com/ben-grande/qusal/issues/105
2024-10-25 05:18:52 -04:00
stages: [commit]
- id: commit-verify
name: commit-verify
entry: scripts/commit-verify.sh
language: script
pass_filenames: false
description: Verify if there is a valid signature associated with the revisions
stages: [push]
Reference in New Issue Copy Permalink