chore: add pre-commit (#17)

Author: mayeut

.github/dependabot.yml

@@ -4,7 +4,5 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
-    groups:
-      actions:
-        patterns:
-          - "*"
+    cooldown:
+      default-days: 7

.github/workflows/ci.yml

@@ -20,8 +20,23 @@ concurrency:
 permissions: {}
 
 jobs:
+  lint:
+    name: Lint
+    permissions:
+      contents: read
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
+        with:
+          python-version: "3.14"
+      - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
+
   llvm-version:
     name: Get LLVM version to build
+    needs: lint
     runs-on: ubuntu-slim
     permissions:
       contents: read

.pre-commit-config.yaml

@@ -0,0 +1,23 @@
+repos:
+
+- repo: https://github.com/pre-commit/pre-commit-hooks
+  rev: v6.0.0
+  hooks:
+  - id: check-case-conflict
+  - id: check-merge-conflict
+  - id: check-yaml
+  - id: check-toml
+  - id: end-of-file-fixer
+  - id: mixed-line-ending
+  - id: trailing-whitespace
+
+- repo: https://github.com/codespell-project/codespell
+  rev: v2.4.1
+  hooks:
+  - id: codespell
+    args: ["-w"]
+
+- repo: https://github.com/zizmorcore/zizmor-pre-commit
+  rev: v1.19.0
+  hooks:
+  - id: zizmor

README.md

@@ -2,6 +2,6 @@
 
 OCI images of statically linked clang/lld
 
-This allows native performance builds in otherwise qemu-user runned containers.
+This allows native performance builds in otherwise qemu-user ran containers.
 
 While the sources in this repository uses the MIT license, the resulting image is governed by the LLVM project own license: [Apache License v2.0 with LLVM Exceptions](https://github.com/llvm/llvm-project/blob/main/LICENSE.TXT)