96 lines
3.0 KiB
Bash
Executable File
96 lines
3.0 KiB
Bash
Executable File
#!/bin/sh
|
|
# Pre-commit hook: run CI-equivalent checks on staged files.
|
|
# Fails the commit if any check fails — matches CI pipeline in .gitea/workflows/ci.yaml.
|
|
#
|
|
# To skip: git commit --no-verify
|
|
|
|
set -e
|
|
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
NC='\033[0m' # No Colour
|
|
|
|
FAILED=0
|
|
|
|
# ---------- Frontend (prettier --write staged, then eslint) ----------
|
|
STAGED_FRONTEND=$(git diff --cached --name-only --diff-filter=ACMR | grep '^frontend/' || true)
|
|
if [ -n "$STAGED_FRONTEND" ]; then
|
|
printf "${YELLOW}Auto-formatting staged frontend files with prettier...${NC}\n"
|
|
echo "$STAGED_FRONTEND" | xargs npx prettier --write 2>/dev/null || true
|
|
# Re-stage any files prettier modified so formatting is included in the commit
|
|
git diff --name-only -- 'frontend/' | xargs -r git add
|
|
fi
|
|
|
|
# Always run eslint — catches pre-existing issues that would fail the pipeline
|
|
printf "${YELLOW}Checking eslint (all files)...${NC}\n"
|
|
if ! cd frontend && npx eslint . 2>&1; then
|
|
printf "${RED}✖ eslint failed${NC}\n"
|
|
FAILED=1
|
|
fi
|
|
cd ..
|
|
|
|
# ---------- Backend checks (only if backend/ files changed) ----------
|
|
BACKEND_FILES=$(git diff --cached --name-only -- 'backend/' | head -1)
|
|
if [ -n "$BACKEND_FILES" ]; then
|
|
printf "${YELLOW}Checking go vet...${NC}\n"
|
|
if ! cd backend && go vet -tags "test,dev" ./... 2>&1; then
|
|
printf "${RED}✖ go vet failed${NC}\n"
|
|
FAILED=1
|
|
fi
|
|
cd ..
|
|
|
|
printf "${YELLOW}Checking golangci-lint...${NC}\n"
|
|
if ! cd backend && golangci-lint run ./... --timeout 3m 2>&1; then
|
|
printf "${RED}✖ golangci-lint failed${NC}\n"
|
|
FAILED=1
|
|
fi
|
|
cd ..
|
|
|
|
printf "${YELLOW}Checking staticcheck...${NC}\n"
|
|
if ! cd backend && staticcheck -tags "test,dev" ./... 2>&1; then
|
|
printf "${RED}✖ staticcheck failed${NC}\n"
|
|
FAILED=1
|
|
fi
|
|
cd ..
|
|
|
|
printf "${YELLOW}Checking gosec...${NC}\n"
|
|
if ! cd backend && gosec -severity medium -tags "test,dev" ./... 2>&1; then
|
|
printf "${RED}✖ gosec failed${NC}\n"
|
|
FAILED=1
|
|
fi
|
|
cd ..
|
|
|
|
printf "${YELLOW}Checking go mod tidy...${NC}\n"
|
|
cp backend/go.sum backend/go.sum.bak
|
|
cp backend/go.mod backend/go.mod.bak
|
|
cd backend && go mod tidy && cd ..
|
|
if ! diff -q backend/go.sum backend/go.sum.bak >/dev/null 2>&1 || ! diff -q backend/go.mod backend/go.mod.bak >/dev/null 2>&1; then
|
|
printf "${RED}✖ go.mod or go.sum out of date — run 'go mod tidy' and stage the changes${NC}\n"
|
|
FAILED=1
|
|
fi
|
|
rm -f backend/go.sum.bak backend/go.mod.bak
|
|
fi
|
|
|
|
# ---------- Global checks ----------
|
|
|
|
printf "${YELLOW}Checking secrets...${NC}\n"
|
|
if command -v gitleaks >/dev/null 2>&1; then
|
|
if ! gitleaks detect --source . --no-banner 2>&1; then
|
|
printf "${RED}✖ gitleaks detected secrets${NC}\n"
|
|
FAILED=1
|
|
fi
|
|
else
|
|
printf " (gitleaks not installed — skipping; CI will catch secrets)\n"
|
|
fi
|
|
|
|
# ---------- Result ----------
|
|
if [ "$FAILED" -ne 0 ]; then
|
|
printf "\n${RED}Commit blocked — fix the issues above, then commit again.${NC}\n"
|
|
printf "${YELLOW}To skip checks: git commit --no-verify${NC}\n"
|
|
exit 1
|
|
fi
|
|
|
|
printf "${GREEN}✓ All pre-commit checks passed${NC}\n"
|
|
exit 0
|