Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2024-09-20 09:15:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
88d9ba525c
qusal/.pre-commit-config.yaml

64 lines
1.6 KiB
YAML
Raw Normal View History

refactor: initial commit
2023-11-13 14:33:28 +00:00
# SPDX-FileCopyrightText: 2023 Benjamin Grande M. S. <ben.grande.b@gmail.com>
#
# SPDX-License-Identifier: GPL-3.0-or-later
---
repos:
- repo: local
hooks:
feat: print hex of unicode Useful to detect unwanted characters in third party contributions patches using a CI hook.
2024-03-14 11:09:49 +00:00
- id: unicode-prohibit
name: unicode-prohibit
entry: scripts/unicode-prohibit.sh
language: script
pass_filenames: true
description: Prohibit Unicode
refactor: initial commit
2023-11-13 14:33:28 +00:00
- id: reuse
name: reuse
entry: reuse
args: [lint]
language: python
pass_filenames: false
description: Lint files to comply with the REUSE Specification
feat: print hex of unicode Useful to detect unwanted characters in third party contributions patches using a CI hook.
2024-03-14 11:09:49 +00:00
refactor: initial commit
2023-11-13 14:33:28 +00:00
- id: salt-lint
name: salt-lint
entry: scripts/salt-lint.sh
language: script
pass_filenames: true
description: Lint Salt files
feat: print hex of unicode Useful to detect unwanted characters in third party contributions patches using a CI hook.
2024-03-14 11:09:49 +00:00
refactor: initial commit
2023-11-13 14:33:28 +00:00
- id: shellcheck
name: shellcheck
entry: scripts/shell-lint.sh
language: script
pass_filenames: true
description: Lint Shellscripts
feat: print hex of unicode Useful to detect unwanted characters in third party contributions patches using a CI hook.
2024-03-14 11:09:49 +00:00
refactor: initial commit
2023-11-13 14:33:28 +00:00
- id: gitlint
name: gitlint
language: python
entry: gitlint
args: [--staged, --msg-filename]
stages: [commit-msg]
fix: uninstall cacher client with tag in pillar Targeting only qubes with the tag on the installation instructions is still useful as it is faster than targeting all qubes. Fixes: https://github.com/ben-grande/qusal/issues/41
2024-06-13 11:28:24 +00:00
pass_filenames: true
refactor: initial commit
2023-11-13 14:33:28 +00:00
description: Lint Git commits
feat: build and sign RPM packages Passing files to Dom0 is always dangerous: - Passing a git repository is dangerous as it can have ignored modified files and signature verification will pass. - Passing an archive is troublesome for updates. - Passing an RPM package depends on the RPM verification to be correct, some times it is not. - Passing a RPM repository definition is less troublesome for the user, as it is a small file to verify the contents and update mechanism is via the package manager. Trust in RPM verification is still required. Many improvements were made to the build scripts: - requires-program: Single function to check if program is installed; - spec-get: Sort project names for the usage message; - spec-get: Only running commands that are necessary; - spec-get: Fix empty summary when readme has copyright header; - spec-gen: Fix grep warning of escaped symbol; - spec-build: Sign RPM and verify signature; - spec-build: Only lint the first SPEC for faster runtime; - yumrepo-gen: Generate a local yum repository with signed metadata; - qubesbuilder-gen: Generate a .qubesbuilder based on tracked projects; - release: Build, sign and push all RPMs to repository. Goal is to be able to build with qubes-builderv2 Qubes Executor. For: https://github.com/ben-grande/qusal/issues/37
2024-06-12 12:44:04 +00:00
ci: pass pre-commit script argument on its own key
2024-06-22 07:04:18 +00:00
- id: qubesbuilder-gen
name: qubesbuilder-gen
entry: scripts/qubesbuilder-gen.sh
args: [test]
feat: build and sign RPM packages Passing files to Dom0 is always dangerous: - Passing a git repository is dangerous as it can have ignored modified files and signature verification will pass. - Passing an archive is troublesome for updates. - Passing an RPM package depends on the RPM verification to be correct, some times it is not. - Passing a RPM repository definition is less troublesome for the user, as it is a small file to verify the contents and update mechanism is via the package manager. Trust in RPM verification is still required. Many improvements were made to the build scripts: - requires-program: Single function to check if program is installed; - spec-get: Sort project names for the usage message; - spec-get: Only running commands that are necessary; - spec-get: Fix empty summary when readme has copyright header; - spec-gen: Fix grep warning of escaped symbol; - spec-build: Sign RPM and verify signature; - spec-build: Only lint the first SPEC for faster runtime; - yumrepo-gen: Generate a local yum repository with signed metadata; - qubesbuilder-gen: Generate a .qubesbuilder based on tracked projects; - release: Build, sign and push all RPMs to repository. Goal is to be able to build with qubes-builderv2 Qubes Executor. For: https://github.com/ben-grande/qusal/issues/37
2024-06-12 12:44:04 +00:00
language: script
ci: pass pre-commit script argument on its own key
2024-06-22 07:04:18 +00:00
pass_filenames: false
feat: build and sign RPM packages Passing files to Dom0 is always dangerous: - Passing a git repository is dangerous as it can have ignored modified files and signature verification will pass. - Passing an archive is troublesome for updates. - Passing an RPM package depends on the RPM verification to be correct, some times it is not. - Passing a RPM repository definition is less troublesome for the user, as it is a small file to verify the contents and update mechanism is via the package manager. Trust in RPM verification is still required. Many improvements were made to the build scripts: - requires-program: Single function to check if program is installed; - spec-get: Sort project names for the usage message; - spec-get: Only running commands that are necessary; - spec-get: Fix empty summary when readme has copyright header; - spec-gen: Fix grep warning of escaped symbol; - spec-build: Sign RPM and verify signature; - spec-build: Only lint the first SPEC for faster runtime; - yumrepo-gen: Generate a local yum repository with signed metadata; - qubesbuilder-gen: Generate a .qubesbuilder based on tracked projects; - release: Build, sign and push all RPMs to repository. Goal is to be able to build with qubes-builderv2 Qubes Executor. For: https://github.com/ben-grande/qusal/issues/37
2024-06-12 12:44:04 +00:00
description: Check if .qubesbuilder is up to date
fix: generate RPM Specs for Qubes Builder V2 It doesn't checkout the current directory when querying the spec, so we provide the already modified version of the spec.
2024-06-21 15:00:06 +00:00
# TODO: generate temporary spec and compare against staged one.
# - id: spec-gen
# name: spec-gen
# language: script
# entry: scripts/spec-gen.sh test
# args: [test]
# # pass_filenames: true
# description: Check if RPM SPEC files are up to date
Reference in New Issue Copy Permalink