added pre commit

garethahealy · garethahealy · commit 7932462621c4 · 2025-02-12T13:30:11.000Z
diff --git a/.github/workflows/confbatstest.yaml b/.github/workflows/confbatstest.yaml
@@ -48,4 +48,4 @@ jobs:
           else
             echo "$FILE does not exist."
             exit 1
-          fi
+          fi
diff --git a/.github/workflows/get-image-version.yaml b/.github/workflows/get-image-version.yaml
@@ -45,7 +45,7 @@ jobs:
               echo "MINOR_VERSION missmatch"
               exit 1
           fi
-          
+
           expected_tags=("latest" "v1.32.1" "v1.32")
           if [[ "${GITHUB_REF}" =~ refs/tags/(.*) ]]; then
             expected_tags+=("git-${BASH_REMATCH[1]}")
@@ -54,4 +54,4 @@ jobs:
           if [[ "${tags[*]}" != "${expected_tags[*]}" ]]; then
               echo "IMAGE_TAGS missmatch"
               exit 1
-          fi
+          fi
diff --git a/.github/workflows/github-dispatches-build.yaml b/.github/workflows/github-dispatches-build.yaml
@@ -53,4 +53,4 @@ jobs:
           registry: ghcr.io/${{ github.repository }}
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
-          tags: ${{ steps.build_image.outputs.tags }}
+          tags: ${{ steps.build_image.outputs.tags }}
diff --git a/.github/workflows/github-dispatches.yaml b/.github/workflows/github-dispatches.yaml
@@ -33,4 +33,4 @@ jobs:
         uses: ./github-dispatches
         with:
           username_token: ${{ secrets.REPO_TOKEN }}
-          repo_array: '[{"url":"redhat-cop/rego-policies","event_type":"Trigger","client_payload":{"from-action":"github-dispatches"}}]'
+          repo_array: '[{"url":"redhat-cop/rego-policies","event_type":"Trigger","client_payload":{"from-action":"github-dispatches"}}]'
diff --git a/.github/workflows/kyverno-cli-build.yaml b/.github/workflows/kyverno-cli-build.yaml
@@ -54,4 +54,4 @@ jobs:
           registry: ghcr.io/${{ github.repository }}
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
-          tags: ${{ steps.build_image.outputs.tags }}
+          tags: ${{ steps.build_image.outputs.tags }}
diff --git a/.github/workflows/kyverno-cli.yaml b/.github/workflows/kyverno-cli.yaml
@@ -38,4 +38,4 @@ jobs:
       - name: kyverno-cli - raw
         uses: ./kyverno-cli
         with:
-          raw: kyverno apply kyverno-cli/_test/policy.yaml --resource kyverno-cli/_test/namespace.yaml
+          raw: kyverno apply kyverno-cli/_test/policy.yaml --resource kyverno-cli/_test/namespace.yaml
diff --git a/.github/workflows/redhat-csp-download-build.yaml b/.github/workflows/redhat-csp-download-build.yaml
@@ -53,4 +53,4 @@ jobs:
           registry: ghcr.io/${{ github.repository }}
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
-          tags: ${{ steps.build_image.outputs.tags }}
+          tags: ${{ steps.build_image.outputs.tags }}
diff --git a/.github/workflows/redhat-csp-download.yaml b/.github/workflows/redhat-csp-download.yaml
@@ -23,7 +23,7 @@ jobs:
       - uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf # v3.1.0
         with:
           dockerfile: redhat-csp-download/Dockerfile_build
-          
+
       - name: Switch the action to use the Dockerfile_build
         run: |
           mv redhat-csp-download/Dockerfile redhat-csp-download/Dockerfile_runnable
@@ -43,11 +43,11 @@ jobs:
             echo "RH_USERNAME or RH_PASSWORD is empty. Skipping."
             exit 0
           fi
-          
+
           FILE="eap-connectors.zip"
           if [ -f "$FILE" ]; then
             echo "$FILE exists."
           else
             echo "$FILE does not exist."
             exit 1
-          fi
+          fi
diff --git a/.github/workflows/set-helm-version.yaml b/.github/workflows/set-helm-version.yaml
@@ -40,11 +40,11 @@ jobs:
               echo "Did not find expected chart version!"
               exit 1
           fi
-          
+
           if grep -Fxq "appVersion: v1.6.0" set-helm-version/_test/Chart.yaml
           then
               echo "Found expected app version"
           else
               echo "Did not find expected app version!"
               exit 1
-          fi
+          fi
diff --git a/.github/workflows/ssh-agent-build.yaml b/.github/workflows/ssh-agent-build.yaml
@@ -42,4 +42,4 @@ jobs:
         run: |
           pushd ssh-agent/
           npm run compile
-          popd
+          popd
diff --git a/.gitignore b/.gitignore
@@ -21,4 +21,4 @@
 *.iws
 *.iml
 
-ssh-agent/node_modules
+ssh-agent/node_modules
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -0,0 +1,21 @@
+exclude: 'ssh-agent/dist/index.js'
+
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v5.0.0
+    hooks:
+      - id: check-case-conflict
+      - id: check-yaml
+      - id: check-shebang-scripts-are-executable
+      - id: check-json
+      - id: end-of-file-fixer
+      - id: trailing-whitespace
+  - repo: https://gitlab.cee.redhat.com/infosec-public/developer-workbench/tools.git
+    rev: rh-pre-commit-2.3.2
+    hooks:
+      # If you have not run this hook on your system before, it may prompt you to
+      # log in for patterns, and you will need to try again.
+      #
+      # Docs: https://source.redhat.com/departments/it/it-information-security/leaktk/leaktk_components/rh_pre_commit
+      - id: rh-pre-commit
+      - id: rh-pre-commit.commit-msg # Optional for commit-msg attestation
diff --git a/CODEOWNERS b/CODEOWNERS
@@ -1,2 +1,2 @@
 # https://github.com/orgs/redhat-cop/teams/github-actions-mergers
-* @redhat-cop/github-actions-mergers
+* @redhat-cop/github-actions-mergers
diff --git a/SECURITY.md b/SECURITY.md
@@ -6,4 +6,4 @@ Only the latest version is supported.
 
 ## Reporting a Vulnerability
 
-For any issues or concerns, please contact: [@container-cop-core](https://github.com/orgs/redhat-cop/teams/container-cop-core)
+For any issues or concerns, please contact: [@container-cop-core](https://github.com/orgs/redhat-cop/teams/container-cop-core)
diff --git a/chart-repo-pr-action/README.md b/chart-repo-pr-action/README.md
@@ -102,4 +102,4 @@ Of course, be sure to use a different name other than `PAT` if you gave your sec
 ### The `head_branch` Parameter
 One important thing to call out about the `head_branch` parameter is that this action will make a **force push** against this branch. As a result, it is highly recommended that you select a dedicated `head_branch` for this action or use the default `feat/sync` branch. If you attempt to make changes to `head_branch`, they may be wiped out when this action runs.
 
-The force push is necessary because this action synchronizes your `head_branch` with the central chart repo's `base_branch` in order to produce an accurate diff. Since it is possible that this will rewrite `head_branch`'s history, this action performs a force push.
+The force push is necessary because this action synchronizes your `head_branch` with the central chart repo's `base_branch` in order to produce an accurate diff. Since it is possible that this will rewrite `head_branch`'s history, this action performs a force push.
diff --git a/chart-repo-pr-action/action.yml b/chart-repo-pr-action/action.yml
@@ -46,4 +46,4 @@ inputs:
   commit_message:
     description: Commit message to use for push
     required: false
-    default: Syncing local charts with central chart repo
+    default: Syncing local charts with central chart repo
diff --git a/chart-repo-pr-action/entrypoint.sh b/chart-repo-pr-action/entrypoint.sh
@@ -90,4 +90,4 @@ if [ $exit_code -eq 0 ]; then
   exit 0
 else
   gh pr create --base $BASE_BRANCH --head $head --title "$COMMIT_MESSAGE" --body "Syncing charts from $head" --repo $CHART_REPO
-fi
+fi
diff --git a/confbatstest/README.md b/confbatstest/README.md
@@ -25,4 +25,4 @@ Execute a command, such as konstraint to generate rego policy documentation.
       uses: redhat-cop/github-actions/confbatstest@master
       with:
         raw: konstraint doc -o POLICIES.md
-```
+```
diff --git a/confbatstest/_test/conftest.sh b/confbatstest/_test/conftest.sh
@@ -2,6 +2,6 @@
 
 @test "template.yml" {
   run conftest test confbatstest/_test/template.yml
-  
+
   [ "$status" -eq 0 ]
-}
+}
diff --git a/confbatstest/_test/template.yml b/confbatstest/_test/template.yml
@@ -2,4 +2,4 @@
 apiVersion: template.openshift.io/v1
 kind: Template
 metadata:
-  name: Foo
+  name: Foo
diff --git a/confbatstest/entrypoint.sh b/confbatstest/entrypoint.sh
@@ -50,12 +50,12 @@ exec_raw() {
   local COMMAND="${1}"
 
   echo "Executing: ${COMMAND}"
-  
+
   eval "${COMMAND}"
 }
 
 if [[ -z "${3}" ]]; then
   exec_bats "${1}" "${2}"
 else
   exec_raw "${3}"
-fi
+fi
diff --git a/confbatstest/version.json b/confbatstest/version.json
@@ -1,3 +1,3 @@
 {
   "version": "v4.4.0"
-}
+}
diff --git a/disconnected-csv/README.md b/disconnected-csv/README.md
@@ -24,7 +24,7 @@ If no environment variables referencing container image refs are found, the acti
 NOTE - no related images found injected as environment variables prefixed with ${RELATED_IMAGE_ENV_PREFIX}.
 
 If your Operator deploys an application container, it is recommended that you inject the container image reference
-as an environment variable, and define this environment variable in your Operator Deployment definition 
+as an environment variable, and define this environment variable in your Operator Deployment definition
 in your ClusterServiceVersion.
 
 Example:
diff --git a/disconnected-csv/action.yml b/disconnected-csv/action.yml
@@ -17,7 +17,7 @@ inputs:
     default: 'RELATED_IMAGE_'
   TAGS_TO_DIGESTS:
     description: |
-      If set, this triggers lookup and conversion to tag-based references 
+      If set, this triggers lookup and conversion to tag-based references
       to digest-based references. All tag-based references in the CSV will be
       replaced with their digest equivalents. To avoid this conversion,
       leave this input unset.
diff --git a/disconnected-csv/add_related_image.py b/disconnected-csv/add_related_image.py
@@ -35,4 +35,3 @@
 with open(args.csv_file, 'w') as stream_out:
     yaml = YAML()
     yaml.dump(csv, stream_out)
-
diff --git a/disconnected-csv/attach_image_digests.sh b/disconnected-csv/attach_image_digests.sh
@@ -46,7 +46,7 @@ then
 NOTE - no related images found injected as environment variables prefixed with ${RELATED_IMAGE_ENV_PREFIX}.
 
 If your Operator deploys an application container, it is recommended that you inject the container image reference
-as an environment variable, and define this environment variable in your Operator Deployment definition 
+as an environment variable, and define this environment variable in your Operator Deployment definition
 in your ClusterServiceVersion.
 
 Example:
@@ -67,7 +67,7 @@ fi
 # get unique refs only
 sorted_unique_refs=($(echo "${source_refs[@]}" | tr ' ' '\n' | sort -u | tr '\n' ' '))
 
-echo  
+echo
 echo "The following refs were found:"
 for ref in "${sorted_unique_refs[@]}"
 do
@@ -79,7 +79,7 @@ echo
 for ref in "${sorted_unique_refs[@]}"
 do
   echo "Processing $ref..."
- 
+
   # if not a digest ref, skopeo inspect it.
   if ! [[ "$ref" =~ "@" ]]
   then
diff --git a/get-image-version/_test/version.json b/get-image-version/_test/version.json
@@ -1 +1 @@
-{"version":"v1.32.1"}
+{"version":"v1.32.1"}
diff --git a/get-image-version/action.yml b/get-image-version/action.yml
@@ -38,4 +38,3 @@ runs:
         echo "VERSION=$(echo $VERSION)" >> $GITHUB_OUTPUT
         echo "MINOR_VERSION=$(echo ${VERSION%.*})" >> $GITHUB_OUTPUT
         echo "IMAGE_TAGS=$(echo ${TAGS[*]})" >> $GITHUB_OUTPUT
-        
diff --git a/github-dispatches/README.md b/github-dispatches/README.md
@@ -12,4 +12,4 @@ This action triggers a GitHub CI [dispatches event](https://blog.marcnuri.com/tr
       with:
         username_token: ${{ secrets.REPO_TOKEN }}
         repo_array: '[{"url":"owner/repo","event_type":"Triggered","client_payload":{"customField":"customValue"}}]'
-```
+```
diff --git a/github-dispatches/action.yml b/github-dispatches/action.yml
@@ -17,4 +17,4 @@ runs:
   image: 'Dockerfile'
   args:
     - ${{ inputs.repo_array }}
-    - ${{ inputs.username_token }}
+    - ${{ inputs.username_token }}
diff --git a/github-dispatches/entrypoint.sh b/github-dispatches/entrypoint.sh
@@ -44,4 +44,4 @@ exec_dispatches() {
   done
 }
 
-exec_dispatches "${1}" "${2}"
+exec_dispatches "${1}" "${2}"
diff --git a/github-dispatches/version.json b/github-dispatches/version.json
@@ -1,3 +1,3 @@
 {
   "version": "v4.4.0"
-}
+}
diff --git a/kyverno-cli/README.md b/kyverno-cli/README.md
@@ -24,4 +24,4 @@ Execute a command, such as `kyverno apply`:
       uses: redhat-cop/github-actions/kyverno-cli@master
       with:
         raw: konstraint doc -o POLICIES.md
-```
+```
diff --git a/kyverno-cli/_test/kyverno.sh b/kyverno-cli/_test/kyverno.sh
@@ -4,4 +4,4 @@
   run kyverno apply kyverno-cli/_test/policy.yaml --resource kyverno-cli/_test/namespace.yaml
 
   [ "$status" -eq 0 ]
-}
+}
diff --git a/kyverno-cli/_test/namespace.yaml b/kyverno-cli/_test/namespace.yaml
@@ -3,4 +3,4 @@ kind: Namespace
 metadata:
   name: test
   labels:
-    app.kubernetes.io/name: test
+    app.kubernetes.io/name: test
diff --git a/kyverno-cli/_test/policy.yaml b/kyverno-cli/_test/policy.yaml
@@ -15,4 +15,4 @@ spec:
         pattern:
           metadata:
             labels:
-              app.kubernetes.io/name: "?*"
+              app.kubernetes.io/name: "?*"
diff --git a/kyverno-cli/action.yml b/kyverno-cli/action.yml
@@ -18,4 +18,4 @@ runs:
   image: 'Dockerfile'
   args:
     - ${{ inputs.tests }}
-    - ${{ inputs.raw }}
+    - ${{ inputs.raw }}
diff --git a/kyverno-cli/entrypoint.sh b/kyverno-cli/entrypoint.sh
@@ -17,12 +17,12 @@ exec_raw() {
   local COMMAND="${1}"
 
   echo "Executing: ${COMMAND}"
-  
+
   eval "${COMMAND}"
 }
 
 if [[ -z "${2}" ]]; then
   exec_bats "${1}"
 else
   exec_raw "${2}"
-fi
+fi
diff --git a/kyverno-cli/version.json b/kyverno-cli/version.json
@@ -1,3 +1,3 @@
 {
   "version": "v4.4.0"
-}
+}
diff --git a/redhat-csp-download/README.md b/redhat-csp-download/README.md
@@ -19,4 +19,4 @@ which can be used as part of your GitHub integration tests.
 ### Action Volume Mapping
 If you want to use your files after this action, they need to be written to a volume, such as:
 
-    /github/workspace
+    /github/workspace
diff --git a/redhat-csp-download/action.yml b/redhat-csp-download/action.yml
@@ -21,4 +21,4 @@ runs:
   args:
     - ${{ inputs.rh_username }}
     - ${{ inputs.rh_password }}
-    - ${{ inputs.download }}
+    - ${{ inputs.download }}
diff --git a/redhat-csp-download/ansible/download.yml b/redhat-csp-download/ansible/download.yml
@@ -13,4 +13,4 @@
         username: "{{ rh_username }}"
         password: "{{ rh_password }}"
       with_items:
-        - "{{ download | from_json}}"
+        - "{{ download | from_json}}"
diff --git a/redhat-csp-download/ansible/requirements.yml b/redhat-csp-download/ansible/requirements.yml
@@ -1,3 +1,3 @@
 ---
 collections:
-  - name: middleware_automation.redhat_csp_download
+  - name: middleware_automation.redhat_csp_download
diff --git a/redhat-csp-download/entrypoint.sh b/redhat-csp-download/entrypoint.sh
@@ -25,4 +25,4 @@ exec_csp() {
   popd
 }
 
-exec_csp "${1}" "${2}" "${3}"
+exec_csp "${1}" "${2}" "${3}"
diff --git a/redhat-csp-download/version.json b/redhat-csp-download/version.json
@@ -1,3 +1,3 @@
 {
   "version": "v4.4.0"
-}
+}
diff --git a/s2i/entrypoint.sh b/s2i/entrypoint.sh
diff --git a/set-helm-version/README.md b/set-helm-version/README.md
diff --git a/ssh-agent/eslint.config.cjs b/ssh-agent/eslint.config.cjs

-Original file line number
+Diff line change
           else
             echo "$FILE does not exist."
             exit 1
 -          fi
 +          fi