.pre-commit-config.yaml

default_language_version:
  python: python3

default_stages: [ commit, push ]

repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v4.6.0
    hooks:
      - id: trailing-whitespace
      - id: end-of-file-fixer
      - id: check-yaml
        args: ["--unsafe"]
      - id: check-json
      - id: check-toml
      - id: check-added-large-files
        args: ['--maxkb=4096']
      - id: check-merge-conflict
      - id: check-vcs-permalinks
      - id: debug-statements
      - id: detect-private-key
      - id: trailing-whitespace
      - id: detect-aws-credentials
        args: [ "--allow-missing-credentials" ]

  - repo: https://github.com/Yelp/detect-secrets
    rev: v1.5.0
    hooks:
      - id: detect-secrets
        args: [ '--baseline', '.secrets.baseline' ]

  - repo: https://github.com/sirosen/texthooks
    rev: 0.6.7
    hooks: [ { id: fix-smartquotes }, { id: fix-ligatures } ]

  - repo: https://github.com/charliermarsh/ruff-pre-commit
    rev: 'v0.6.0'
    hooks:
      - id: ruff
        args: [ --fix, --exit-non-zero-on-fix ]

  - repo: https://github.com/PyCQA/bandit/
    rev: 1.7.9
    hooks:
      - id: bandit
        args: [ "-c", "pyproject.toml" ]
        additional_dependencies: [ "bandit[toml]" ]