Initial commit #2
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright 2026 The Financial Risk Group, Inc. | |
| name: pre-commit | |
| on: | |
| push: | |
| branches: ["main"] | |
| pull_request: | |
| workflow_dispatch: | |
| jobs: | |
| pre-commit: | |
| name: Pre-commit checks | |
| runs-on: [self-hosted, permanent] | |
| permissions: | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: astral-sh/setup-uv@v7 | |
| # uvx runs pre-commit from an ephemeral environment, so this repo needs no | |
| # Python manifest. Safe here in a way it isn't locally: CI installs no git | |
| # hook, so nothing records a path into uv's prunable cache. Hook versions | |
| # are pinned by `rev` in .pre-commit-config.yaml and bumped by Dependabot. | |
| # If this repo grows real Python code, put pre-commit in a `dev` dependency | |
| # group and switch to `uv sync --only-group dev` + `uv run --no-sync`. | |
| - name: Run pre-commit | |
| run: uvx pre-commit run --all-files --show-diff-on-failure --color always | |
| - name: Hint on failure | |
| if: failure() | |
| run: | | |
| echo "::error title=pre-commit failed::Reproduce locally with the commands below, then re-commit and push." | |
| echo "" | |
| echo " make pre-commit-install # one-time: installs the git hook so this runs on every commit" | |
| echo " make pre-commit # runs every hook against every file (auto-fixes where possible)" | |
| echo "" | |
| echo "Most hooks (end-of-file-fixer, trailing-whitespace, addlicense, mixed-line-ending) auto-fix." | |
| echo "gitleaks and check-added-large-files report problems for you to address manually." |