prescriptionsforpatients/.pre-commit-config.yaml at main · NHSDigital/prescriptionsforpatients · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v6.0.0
    hooks:
      - id: check-merge-conflict
        name: Check for merge conflict strings

      - id: end-of-file-fixer
        name: Fix missing newline at the end of files

      - id: check-shebang-scripts-are-executable
        name: Check shell scripts are executable
        files: \.(sh)$

      - id: check-yaml
        name: Check pipelines configuration
        files: ^(.github)

  - repo: https://github.com/pycqa/flake8
    rev: "7ef0350a439c93166bc8ba89fcc3de6a9a664e6c" # release 6.1.0
    hooks:
      - id: flake8

  - repo: local
    hooks:
      - id: grype-scan-local
        name: Grype scan local changes
        entry: make
        args: ["grype-scan-local"]
        language: system
        pass_filenames: false
        always_run: true

      - id: check-commit-signing
        name: Check commit signing
        description: Ensures that commits are GPG signed
        entry: bash
        args:
          - -c
          - |
            if ! git config --get commit.gpgsign | grep -q "true" > /dev/null 2>&1; then
              echo "Error: Commit signing is not enabled."
              echo "Please enable commit signing with:"
              echo "  git config commit.gpgsign true"
              echo ""
              echo "For more information, see: https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits"
              exit 1
            fi
            echo "Commit signing is properly configured."
        language: system
        pass_filenames: false
        always_run: true

      - id: lint-getMyPrescriptions
        name: Lint getMyPrescriptions
        entry: npm
        args: ["run", "--prefix=packages/getMyPrescriptions", "lint"]
        language: system
        files: ^packages\/getMyPrescriptions
        types_or: [ts, tsx, javascript, jsx, json]
        pass_filenames: false

      - id: lint-enrichPrescriptions
        name: Lint enrichPrescriptions
        entry: npm
        args: ["run", "--prefix=packages/enrichPrescriptions", "lint"]
        language: system
        files: ^packages\/enrichPrescriptions
        types_or: [ts, tsx, javascript, jsx, json]
        pass_filenames: false

      - id: lint-statusLambda
        name: Lint statusLambda
        entry: npm
        args: ["run", "--prefix=packages/statusLambda", "lint"]
        language: system
        files: ^packages\/statusLambda
        types_or: [ts, tsx, javascript, jsx, json]
        pass_filenames: false

      - id: lint-capabilityStatement
        name: Lint capabilityStatement
        entry: npm
        args: ["run", "--prefix=packages/capabilityStatement", "lint"]
        language: system
        files: ^packages\/capabilityStatement
        types_or: [ts, tsx, javascript, jsx, json]
        pass_filenames: false

      - id: lint-sandbox
        name: Lint sandbox
        entry: npm
        args: ["run", "--prefix=packages/nhsd-pfp-sandbox", "lint"]
        language: system
        files: ^packages\/nhsd-pfp-sandbox
        types_or: [ts, tsx, javascript, jsx, json]
        pass_filenames: false

      - id: lint-serviceSearchClient
        name: Lint serviceSearchClient
        entry: npm
        args: ["run", "--prefix=packages/serviceSearchClient", "lint"]
        language: system
        files: ^packages\/serviceSearchClient
        types_or: [ts, tsx, javascript, jsx, json]
        pass_filenames: false

      - id: lint-distanceSelling
        name: Lint distanceSelling
        entry: npm
        args: ["run", "--prefix=packages/distanceSelling", "lint"]
        language: system
        files: ^packages\/distanceSelling
        types_or: [ts, tsx, javascript, jsx, json]
        pass_filenames: false

      - id: lint-common-utilities
        name: Lint common utilities
        entry: npm
        args: ["run", "--prefix=packages/common/utilities", "lint"]
        language: system
        files: ^packages\/common\/src
        types_or: [ts, tsx, javascript, jsx, json]
        pass_filenames: false

      - id: lint-common-testing
        name: Lint common testing
        entry: npm
        args: ["run", "--prefix=packages/common/testing", "lint"]
        language: system
        files: ^packages\/common\/testing
        types_or: [ts, tsx, javascript, jsx, json]
        pass_filenames: false

      - id: lint-getSecretLayer
        name: Lint getSecretLayer
        entry: make
        args: ["lint-go"]
        language: system
        files: ^packages\/getSecretLayer
        pass_filenames: false

      - id: lint-samtemplates
        name: Lint sam templates
        entry: make
        args: ["cfn-lint"]
        language: system
        files: ^SAMtemplates
        pass_filenames: false

      - id: lint-githubactions
        name: Lint github actions
        entry: make
        args: ["actionlint"]
        language: system
        files: ^.github
        types_or: [yaml]
        pass_filenames: false

      - id: lint-githubaction-scripts
        name: Lint github action scripts
        entry: make
        args: ["shellcheck"]
        language: system
        files: ^.github/scripts
        types_or: [sh, shell]
        pass_filenames: false

      - id: gitleaks
        name: Git Leaks
        description: gitleaks scans commits, commit messages, and --no-ff merges to prevent adding secrets into your git repositories.
        entry: bash
        args:
          - -c
          - "gitleaks git --pre-commit --redact --staged --verbose"
        language: system
fail_fast: true
default_stages: [pre-commit]