add pre-commit-check

Author: mguludag

.github/workflows/pre-commit-check.yml

@@ -0,0 +1,16 @@
+name: Lint Check (pre-commit)
+
+permissions:
+  contents: read
+
+on:
+  # We have to use pull_request_target here as pull_request does not grant
+  # enough permission for reviewdog
+  pull_request_target:
+  push:
+    branches:
+      - main
+
+jobs:
+  pre-commit:
+    uses: bemanproject/infra-workflows/.github/workflows/[email protected]

.pre-commit-config.yaml

@@ -0,0 +1,49 @@
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.4.0 # Use the latest stable version
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-yaml
+      - id: check-added-large-files
+
+  - repo: https://github.com/psf/black
+    rev: 23.9.1 # Use the latest stable version
+    hooks:
+      - id: black
+
+  - repo: https://github.com/pre-commit/mirrors-eslint
+    rev: v8.50.0 # Use the latest stable version
+    hooks:
+      - id: eslint
+
+  - repo: https://github.com/pre-commit/mirrors-prettier
+    rev: v3.0.0 # Use the latest stable version
+    hooks:
+      - id: prettier
+
+  - repo: https://github.com/markdownlint/markdownlint
+    rev: v0.12.0 # Use the latest stable version
+    hooks:
+      - id: markdownlint
+
+  - repo: https://github.com/PyCQA/bandit
+    rev: v1.7.5 # Use the latest stable version
+    hooks:
+      - id: bandit
+
+  - repo: https://github.com/bridgecrewio/checkov
+    rev: 2.4.0 # Use the latest stable version
+    hooks:
+      - id: checkov
+
+  - repo: https://github.com/zricethezav/gitleaks
+    rev: v8.17.0 # Use the latest stable version
+    hooks:
+      - id: gitleaks
+
+default_stages: [commit, push]
+
+exclude: |
+  ^static/.*
+  ^node_modules/.*