kms/.pre-commit-config.yaml at develop · Manuthor/kms · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
---
# Pre-requisites:
# pip install pre-commit conventional-pre-commit
# pre-commit install
# pre-commit install --install-hooks -t commit-msg
# pre-commit autoupdate

# See https://pre-commit.com for more information
# See https://pre-commit.com/hooks.html for more hooks
fail_fast: true
exclude: documentation/pandoc|documentation/overrides|crate/server/src/tests/test_utils.rs|.pre-commit-config.yaml|crate/server/src/routes/google_cse/jwt.rs|crate/server/src/routes/google_cse/python/openssl|documentation/docs/google_cse|crate/pkcs11/sys|documentation/docs/drawings|test_data|documentation/docs/benchmarks.md|crate/hsm/proteccio/driver|crate/server/ui|crate/kmip/src/kmip_2_1/specifications/|crate/kmip/src/kmip_1_4/specifications/|crate/server_database/src/tests/migrate/postgre-4.20.dump.sql|crate/kmip/src/ttlv/tests/pykmip/|crate/kmip/src/oasis
repos:
  - repo: https://github.com/compilerla/conventional-pre-commit
    rev: v4.0.0
    hooks:
      - id: conventional-pre-commit
        stages: [commit-msg]
        args: [] # optional: list of Conventional Commits types to allow e.g. [feat, fix, ci, chore, test]

  - repo: https://github.com/igorshubovych/markdownlint-cli
    rev: v0.44.0
    hooks:
      - id: markdownlint-fix
        args:
          [
            --disable=MD013,
            --disable=MD033,
            --disable=MD041,
            --disable=MD046,
            --fix,
          ]

  - repo: https://github.com/jumanjihouse/pre-commit-hook-yamlfmt
    rev: 0.2.3
    hooks:
      - id: yamlfmt
        args: [--mapping, "2", --sequence, "4", --offset, "2"]
        exclude: ansible

  - repo: https://github.com/crate-ci/typos
    rev: v1.31.1
    hooks:
      - id: typos
        exclude: documentation/docs/images/google_cse.drawio.svg|crate/test_server/src/test_jwt.rs|crate/pkcs11/documentation/veracrypt_ckms.svg|crate/server/src/tests/google_cse/|documentation/docs/pkcs11/images|crate/server/resources|documentation/docs/algorithms.md|crate/server/src/tests/certificates/chain/root/ca/|documentation/docs/pki/smime.md|documentation/docs/hsms/proteccio.md|crate/crypto/src/crypto/rsa/ckm_rsa_aes_key_wrap.rs|crate/cli/src/tests/kms/shared/export_import.rs|ui/src/Locate.tsx

  - repo: https://github.com/Lucas-C/pre-commit-hooks
    rev: v1.5.5
    hooks:
      - id: forbid-crlf
      - id: remove-crlf
      - id: forbid-tabs
        exclude: ^.git/|crate/server/src/tests/certificates/chain/root/ca
      - id: remove-tabs
        exclude: ^.git/|crate/server/src/tests/certificates/chain/root/ca

  - repo: https://github.com/sirosen/texthooks
    rev: 0.6.8
    hooks:
      - id: fix-smartquotes
      - id: fix-ligatures
      - id: fix-spaces
        exclude: documentation/docs/images/google_cse.drawio.svg
      - id: forbid-bidi-controls
      - id: macro-expand

  - repo: https://github.com/jumanjihouse/pre-commit-hooks
    rev: 3.0.0
    hooks:
      - id: shellcheck

  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v5.0.0
    hooks:
      - id: check-added-large-files
        exclude: ui/public
      - id: check-ast
      - id: check-byte-order-marker
      - id: check-builtin-literals
      - id: check-case-conflict
      - id: check-docstring-first
      - id: check-json
        exclude: ui
      - id: check-merge-conflict
      - id: check-symlinks
      - id: check-toml
      - id: check-vcs-permalinks
        exclude: crate/kmip/src/ttlv/kmip_ttlv_deserializer
      - id: check-xml
        exclude: crate/server/resources/production.drawio.svg
      - id: check-yaml
      - id: debug-statements
      - id: destroyed-symlinks
      - id: detect-private-key
        exclude: test_data|documentation/docs|crate/cli/src/tests/kms/google_cmd/identities.rs|crate/server/src/tests|crate/cli/src/tests/kms/shared/export_import.rs|crate/crypto/src/crypto/rsa/ckm_rsa_aes_key_wrap.rs

      - id: double-quote-string-fixer
      - id: end-of-file-fixer
        exclude: documentation/docs/cli/main_commands.md|documentation/docs
      - id: file-contents-sorter
      - id: fix-byte-order-marker
      - id: fix-encoding-pragma
      - id: mixed-line-ending
        args: [--fix=lf]
      - id: name-tests-test
      - id: requirements-txt-fixer
      - id: sort-simple-yaml
      - id: trailing-whitespace
        exclude: crate/crypto/src/openssl/x509_extensions.rs|documentation/docs/cli/main_commands.md

  - repo: https://github.com/psf/black
    rev: 25.1.0
    hooks:
      - id: black
        # avoid clash with `double-quote-string-fixer`
        args: [--skip-string-normalization]

  - repo: local
    hooks:
      - id: nixfmt
        name: nixfmt
        entry: nixfmt
        language: system
        files: \.nix$
        pass_filenames: true

  - repo: https://github.com/astro/deadnix
    rev: v1.2.1
    hooks:
      - id: deadnix
        args: [--edit]

  - repo: local
    hooks:
      - id: statix
        name: statix check
        entry: bash -c 'for f in "$@"; do statix fix "$f"; done' --
        language: system
        files: \.nix$
        pass_filenames: true

  - repo: https://github.com/Cosmian/git-hooks.git
    rev: v1.0.42
    hooks:
      - id: nightly-cargo-format
      - id: dprint-toml-fix
        stages: [manual]
      - id: cargo-upgrade
        stages: [manual]
      - id: cargo-update
        stages: [manual]
      - id: cargo-machete

  - repo: https://github.com/EmbarkStudios/cargo-deny
    rev: 0.18.2
    hooks:
      - id: cargo-deny
        args: [--all-features, check]
        stages: [manual]

  - repo: https://github.com/Cosmian/git-hooks.git
    rev: v1.0.42
    hooks:
      - id: docker-compose-up

  - repo: local
    hooks:
      - id: cargo-test-fips
        name: cargo test (sqlite fips)
        entry: bash .github/scripts/test_sqlite.sh --variant fips
        language: system
        types: [rust]
        pass_filenames: false

      - id: cargo-test-non-fips
        name: cargo test (sqlite non-fips)
        entry: bash .github/scripts/test_sqlite.sh --variant non-fips
        language: system
        types: [rust]
        pass_filenames: false
        stages: [manual]

      - id: redis-cargo-test-non-fips
        name: Redis and cargo test (non-fips)
        entry: bash .github/scripts/test_redis.sh --variant non-fips
        language: system
        types: [rust]
        pass_filenames: false

      - id: nix-cargo-test-fips
        name: Nix cargo test (sqlite fips)
        entry: bash .github/scripts/nix.sh --variant fips test sqlite
        language: system
        types: [rust]
        pass_filenames: false
        stages: [manual]

      - id: nix-cargo-test-non-fips
        name: Nix cargo test (sqlite non-fips)
        entry: bash .github/scripts/nix.sh --variant non-fips test redis
        language: system
        types: [rust]
        pass_filenames: false
        stages: [manual]

      - id: kms-server-package
        name: Nix KMS server non-fips packaging
        entry: bash .github/scripts/nix.sh --variant non-fips package
        language: system
        types: [rust]
        pass_filenames: false

      - id: renew-server-doc
        name: renew server cli doc
        entry: bash .github/scripts/renew_server_doc.sh
        language: system
        types: [rust]
        pass_filenames: false

  - repo: https://github.com/Cosmian/git-hooks.git
    rev: v1.0.42
    hooks:
      - id: nightly-clippy-autofix-unreachable-pub
      - id: nightly-clippy-autofix-all-targets-all-features
      - id: nightly-clippy-autofix-all-targets
      - id: clippy-all-targets-all-features
      - id: clippy-all-targets
      - id: cargo-format # in last du to clippy fixes
      - id: docker-compose-down

  - repo: https://github.com/tcort/markdown-link-check
    rev: v3.13.7
    hooks:
      - id: markdown-link-check
        args: [-q, --config, .markdown-link-check.json]
        exclude: .github/copilot-instructions.md