Skip to content

chore: add Python security and quality pre-commit hooks#26

Merged
somethingwithproof merged 1 commit into
mainfrom
chore/add-python-precommit
Mar 9, 2026
Merged

chore: add Python security and quality pre-commit hooks#26
somethingwithproof merged 1 commit into
mainfrom
chore/add-python-precommit

Conversation

@somethingwithproof
Copy link
Copy Markdown
Owner

Summary

  • Adds/upgrades pre-commit hooks for code quality and security scanning
  • Tools: ruff (lint/format), mypy (type check), bandit (SAST), pip-audit (CVE scan), gitleaks (secret detection), actionlint (CI lint)
  • Replaces black/isort/flake8 with ruff, upgrades pre-commit-hooks to v6.0.0
  • Retains repo-specific local hooks (yamllint, ssm-policy-check, ssm-schema-validate)

Test plan

  • Run pre-commit run --all-files locally
  • Verify no false positives block development

Refs #1

Add ruff, mypy, bandit, pip-audit, gitleaks, and actionlint hooks.
Upgrades pre-commit-hooks to v6.0.0.

Refs #1

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
@somethingwithproof somethingwithproof merged commit 95994e0 into main Mar 9, 2026
5 of 6 checks passed
@somethingwithproof somethingwithproof deleted the chore/add-python-precommit branch March 9, 2026 03:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant