.pre-commit-config.yaml

exclude: ^(buildspec.yml|.pre-commit-config.yaml)$
fail_fast: true
repos:
- repo: https://github.com/asottile/seed-isort-config
  rev: v2.2.0
  hooks:
    - id: seed-isort-config
- repo: https://github.com/pre-commit/mirrors-isort
  rev: v5.10.1
  hooks:
  - id: isort
    # language_version: python3.6
- repo: https://github.com/ambv/black
  rev: 22.8.0
  hooks:
  - id: black
- repo: https://github.com/pre-commit/pre-commit-hooks
  rev: v4.1.0
  hooks:
  - id: check-case-conflict
  - id: end-of-file-fixer
  - id: mixed-line-ending
    args:
    - --fix=lf
  - id: trailing-whitespace
  - id: pretty-format-json
    exclude: "[inputs.json|syntax_error.json]"
    args:
    - --autofix
    - --indent=4
    - --no-sort-keys
  - id: check-merge-conflict
  # - id: check-yaml  # doesn't work with CloudFormation templates/intrinsics, should use cfn-lint instead
    # language_version: python3.6
- repo: https://github.com/pycqa/flake8
  rev: "5.0.4"
  hooks:
  - id: flake8
    additional_dependencies:
      - flake8-bugbear>=19.3.0
      - flake8-builtins>=1.4.1
      - flake8-commas>=2.0.0
      - flake8-comprehensions>=2.1.0
      - flake8-debugger>=3.1.0
      - flake8-pep3101>=1.2.1
      # language_version: python3.6
- repo: https://github.com/pre-commit/pygrep-hooks
  rev: v1.9.0
  hooks:
  - id: python-check-blanket-noqa
  - id: python-check-mock-methods
  - id: python-no-log-warn
- repo: https://github.com/PyCQA/bandit
  rev: 1.7.1
  hooks:
  - id: bandit
    files: "^src/"
    # have to skip B101, contract tests use it and there's no way to skip for specific files
    args: ["--skip", "B101"]
- repo: local
  hooks:
  - id: pylint-local
    name: pylint-local
    description: Run pylint in the local virtualenv
    entry: pylint "setup.py" "src/" "tests/"
    language: system
    # ignore all files, run on hard-coded modules instead
    pass_filenames: false
    always_run: true
  - id: pytest-local
    name: pytest-local
    description: Run pytest in the local virtualenv
    # although we mock SDK calls, credentials must be set, otherwise the credential-checking code
    # in boto_helpers.py fails. this probably needs fixing properly in future.
    # on the other hand, this means that accidentally exported creds aren't honoured when running
    # tests, also a good thing
    entry: >
      env AWS_ACCESS_KEY_ID=""
      AWS_SECRET_ACCESS_KEY=""
      AWS_SESSION_TOKEN=""
      AWS_DEFAULT_REGION="us-east-1"
      pytest
      --cov="rpdk.core"
      --doctest-modules
      --random-order-bucket="parent"
      "tests/"
      --pyargs "rpdk.core"
      --verbose
    language: system
    # ignore all files, run on hard-coded modules instead
    pass_filenames: false
    always_run: true