.pre-commit-config.yaml

repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v4.4.0
    hooks:
      - id: check-merge-conflict
      - id: end-of-file-fixer
      - id: trailing-whitespace
  - repo: https://github.com/pycqa/isort
    rev: 5.12.0
    hooks:
      - id: isort
        name: isort (python)
  - repo: local
    hooks:
      - id: kustomize-inflate
        name: kustomize-inflate
        entry: python inflate.py
        language: system
        pass_filenames: false
  - repo: https://github.com/bridgecrewio/checkov.git
    rev: 2.3.96
    hooks:
      - id: checkov
        args: [-d .]
  - repo: https://github.com/Yelp/detect-secrets
    rev: v1.4.0
    hooks:
      - id: detect-secrets
        args:
          - --exclude-files
          - kustomization\.(?:yaml|yml)|\.inflate\.lock\.(?:yaml|yml)|certificate\.(?:yaml|yml)|sealedsecret\..*(?:json|yaml|yml)|build\.(?:yaml|yml)|values\..*(?:yaml|yml)
  - repo: https://github.com/pre-commit/pygrep-hooks
    rev: v1.10.0
    hooks:
      - id: python-check-blanket-noqa
  - repo: https://github.com/python-poetry/poetry
    rev: 1.4.0
    hooks:
      - id: poetry-check
      - id: poetry-lock