/
AlexandrNarbaev
/
opencode_initializer
Обзор
Документация
Войти
/
AlexandrNarbaev
/
opencode_initializer
Код
Запросы
0
Задачи
Вики
Пакеты
0
Релизы
0
CI/CD
Аналитика
Безопасность
main
.pre-commit-config.yaml
48 строк
2 KB
Alexandr Narbaev
fix(P0): sudo hang fix + docs sync + 47-lynis + 48-auditd + comparison.md
10 авг 2026, 17:03
10 авг 2026, 17:03
44ad1e2
Код
Авторство
О чём код?
# Pre-commit hooks for opencode_initializer # Run: pre-commit install # Skip: SKIP=bash-syntax,shellcheck,secrets git commit -m "..." repos: - repo: local hooks: - id: bash-syntax name: Bash syntax check entry: bash -n language: system files: \.sh$ types: [shell] fail_fast: true - id: shellcheck name: ShellCheck entry: shellcheck -S error language: system files: \.sh$ types: [shell] - id: secrets name: Secret scan (API keys, tokens) entry: bash -c 'grep -rnE "sk-[a-zA-Z0-9]{20,}|[a-zA-Z0-9_-]{32,}" "$@" | grep -v ".pre-commit-config.yaml" | grep -v "tests/" && exit 1 || exit 0' -- language: system files: \.sh$|\.py$|\.json$|\.yaml$|\.yml$|\.env$ exclude: tests/|\.pre-commit-config\.yaml|\.example$ - id: grep-p-macos name: No grep -P (macOS compat) entry: bash -c '! grep -rPn "grep\s+-[A-Za-z]*P" "$@"' -- language: system files: \.sh$ exclude: tests/ - id: setup-lines-check name: Check setup.sh line count in README entry: bash scripts/check-setup-lines.sh language: script pass_filenames: false always_run: true - id: trivy-critical name: Trivy CRITICAL check entry: bash -c 'command -v trivy >/dev/null && trivy fs --severity CRITICAL --exit-code 1 --skip-dirs tests . || echo "[pre-commit] Trivy not installed — skipping"' language: system always_run: true pass_filenames: false