mirror of
https://github.com/juanfont/headscale.git
synced 2026-05-23 18:48:42 +09:00
9621a97ebe
Replace the grep/awk hash extraction in build.yml with a structured vendorhash check step; the PR review comment now reads expected/ actual values directly from $GITHUB_OUTPUT instead of scraping Nix stderr. Add a prek hook so divergence is caught locally before push.
73 lines
2.2 KiB
YAML
73 lines
2.2 KiB
YAML
# prek/pre-commit configuration for headscale
|
|
# See: https://prek.j178.dev/quickstart/
|
|
# See: https://prek.j178.dev/builtin/
|
|
|
|
# Global exclusions - ignore generated code
|
|
exclude: ^gen/
|
|
|
|
repos:
|
|
# Built-in hooks from pre-commit/pre-commit-hooks
|
|
# prek will use fast-path optimized versions automatically
|
|
# See: https://prek.j178.dev/builtin/
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v6.0.0
|
|
hooks:
|
|
- id: check-added-large-files
|
|
- id: check-case-conflict
|
|
- id: check-executables-have-shebangs
|
|
- id: check-json
|
|
- id: check-merge-conflict
|
|
- id: check-symlinks
|
|
- id: check-toml
|
|
- id: check-xml
|
|
- id: check-yaml
|
|
- id: detect-private-key
|
|
- id: end-of-file-fixer
|
|
- id: fix-byte-order-marker
|
|
- id: mixed-line-ending
|
|
- id: trailing-whitespace
|
|
|
|
# Local hooks for project-specific tooling
|
|
- repo: local
|
|
hooks:
|
|
# nixpkgs-fmt for Nix files
|
|
- id: nixpkgs-fmt
|
|
name: nixpkgs-fmt
|
|
entry: nixpkgs-fmt
|
|
language: system
|
|
files: \.nix$
|
|
|
|
# Prettier for formatting
|
|
- id: prettier
|
|
name: prettier
|
|
entry: prettier --write --list-different
|
|
language: system
|
|
exclude: ^docs/
|
|
types_or: [javascript, jsx, ts, tsx, yaml, json, toml, html, css, scss, sass, markdown]
|
|
|
|
# mdformat for docs
|
|
- id: mdformat
|
|
name: mdformat
|
|
entry: mdformat
|
|
language: system
|
|
types_or: [markdown]
|
|
files: ^docs/
|
|
|
|
# golangci-lint for Go code quality
|
|
- id: golangci-lint
|
|
name: golangci-lint
|
|
entry: nix develop --command -- golangci-lint run --new-from-rev=HEAD~1 --timeout=5m --fix
|
|
language: system
|
|
types: [go]
|
|
pass_filenames: false
|
|
|
|
# vendor-hash keeps flakehashes.json in sync with go.mod/go.sum.
|
|
# Hot path (no input change) is a sha256 over two small files;
|
|
# only fires `go mod vendor` when the fingerprint actually drifts.
|
|
- id: vendor-hash
|
|
name: vendor-hash
|
|
entry: nix develop --command -- go run ./cmd/vendorhash check
|
|
language: system
|
|
files: ^(go\.mod|go\.sum|flakehashes\.json)$
|
|
pass_filenames: false
|