Skip to content

ci: replace pre-commit/action with direct pre-commit run [SEC-2494] #189

ci: replace pre-commit/action with direct pre-commit run [SEC-2494]

ci: replace pre-commit/action with direct pre-commit run [SEC-2494] #189

Workflow file for this run

name: pre-commit-hook-test
on:
pull_request: null
push:
branches:
- develop
jobs:
test-hooks:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
- name: Configure git safedir properly
run: git config --global --add safe.directory "$(pwd)"
- name: Fake update file
run: git mv tests/python_simple.py python_simple.py
- name: Set up uv
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
with:
enable-cache: true
cache-dependency-glob: .pre-commit-config.yaml
version: "0.11.x"
- name: Cache pre-commit hook envs
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
with:
path: ~/.cache/pre-commit
key: pre-commit-v1|${{ hashFiles('.pre-commit-config.yaml') }}
- name: Install pre-commit
run: UV_EXCLUDE_NEWER="1 week" uv tool install pre-commit --with pre-commit-uv
- name: Test semgrep pre-commit hook
run: pre-commit run --show-diff-on-failure --color=always semgrep --hook-stage manual --files python_simple.py
- name: Test semgrep-ci pre-commit hook
run: pre-commit run --show-diff-on-failure --color=always semgrep-ci --hook-stage manual --files python_simple.py
- name: Test semgrep-docker-develop pre-commit hook
run: pre-commit run --show-diff-on-failure --color=always semgrep-docker-develop --hook-stage manual --files python_simple.py
- name: Test semgrep-docker pre-commit hook
run: pre-commit run --show-diff-on-failure --color=always semgrep-docker --hook-stage manual --files python_simple.py