.pre-commit-config.yaml

# Canonical pre-commit configuration for tfroot-* repositories.
# This file is bundled into the tfroot-runner container image to pre-cache hooks.
# It is also fetched by the shared OpenTofu workflow at CI time.
#
# To update hooks for all tfroot repos, modify this file and rebuild the image.
repos:
  - repo: https://github.com/compilerla/conventional-pre-commit
    rev: v4.3.0
    hooks:
      - id: conventional-pre-commit
        stages: [commit-msg]
  - repo: https://github.com/antonbabenko/pre-commit-terraform
    rev: v1.105.0
    hooks:
      - id: terraform_validate
        args:
          - --hook-config=--retry-once-with-cleanup=true
          - --args=-no-color
          - --tf-init-args=-reconfigure
          - --tf-init-args=-upgrade
          - --tf-init-args=-backend=false
      - id: terraform_tflint
        args:
          - --args=--minimum-failure-severity=error
          - --args=--config=__GIT_WORKING_DIR__/.tflint.hcl
      - id: terraform_checkov
        args:
          - --args=--config-file __GIT_WORKING_DIR__/.checkov.yml
      - id: terraform_fmt
        args:
          - --args=-no-color
          - --args=-diff
          - --args=-recursive
      - id: terraform_docs
        args:
          - --args=--config=.terraform-docs.yml
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v6.0.0
    hooks:
      - id: check-case-conflict
      - id: check-merge-conflict
      - id: check-symlinks
      - id: check-vcs-permalinks
      - id: destroyed-symlinks
      - id: detect-private-key
      - id: end-of-file-fixer
        exclude: README.md
      - id: mixed-line-ending
      - id: trailing-whitespace