.pre-commit-config.yaml

repos:
  # Python Ruff Checks
  - repo: https://github.com/astral-sh/ruff-pre-commit
    rev: v0.15.1
    hooks:
      # Beginner projects
      - id: ruff
        name: ruff check (caesar-cipher)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/beginner/caesar-cipher/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (keylogger)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/beginner/keylogger/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (dns-lookup)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/beginner/dns-lookup/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (metadata-scrubber-tool)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/beginner/metadata-scrubber-tool/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (network-traffic-analyzer)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/beginner/network-traffic-analyzer/python/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (base64-tool)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/beginner/base64-tool/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (c2-beacon backend)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/beginner/c2-beacon/backend/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      # Intermediate projects
      - id: ruff
        name: ruff check (api-security-scanner backend)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/intermediate/api-security-scanner/backend/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (siem-dashboard backend)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/intermediate/siem-dashboard/backend/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      # Advanced projects
      - id: ruff
        name: ruff check (bug-bounty-platform backend)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/advanced/bug-bounty-platform/backend/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (encrypted-p2p-chat backend)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/advanced/encrypted-p2p-chat/backend/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (api-rate-limiter)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/advanced/api-rate-limiter/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (ai-threat-detection backend)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/advanced/ai-threat-detection/backend/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (dlp-scanner)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/intermediate/dlp-scanner/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (linux-ebpf-security-tracer)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/beginner/linux-ebpf-security-tracer/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      # Foundations projects
      - id: ruff
        name: ruff check (hash-identifier)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/foundations/hash-identifier/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (http-headers-scanner)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/foundations/http-headers-scanner/
        exclude: (\.venv|__pycache__|\.pytest_cache)/

      - id: ruff
        name: ruff check (password-manager)
        args: [--fix, --exit-non-zero-on-fix]
        files: ^PROJECTS/foundations/password-manager/
        exclude: (\.venv|__pycache__|\.pytest_cache)/


  # Go golangci-lint Checks
  - repo: local
    hooks:
      - id: golangci-lint-simple-vulnerability-scanner
        name: golangci-lint (simple-vulnerability-scanner)
        entry: bash -c 'cd PROJECTS/beginner/simple-vulnerability-scanner && golangci-lint run --fix'
        language: system
        files: ^PROJECTS/beginner/simple-vulnerability-scanner/
        types: [go]
        pass_filenames: false

      - id: golangci-lint-docker-security-audit
        name: golangci-lint (docker-security-audit)
        entry: bash -c 'cd PROJECTS/intermediate/docker-security-audit && golangci-lint run --fix'
        language: system
        files: ^PROJECTS/intermediate/docker-security-audit/
        types: [go]
        pass_filenames: false

      - id: golangci-lint-secrets-scanner
        name: golangci-lint (secrets-scanner)
        entry: bash -c 'cd PROJECTS/intermediate/secrets-scanner && golangci-lint run --fix'
        language: system
        files: ^PROJECTS/intermediate/secrets-scanner/
        types: [go]
        pass_filenames: false

      - id: golangci-lint-canary-token-generator
        name: golangci-lint (canary-token-generator backend)
        entry: bash -c 'cd PROJECTS/beginner/canary-token-generator/backend && golangci-lint run --fix'
        language: system
        files: ^PROJECTS/beginner/canary-token-generator/backend/
        types: [go]
        pass_filenames: false

      - id: golangci-lint-systemd-persistence-scanner
        name: golangci-lint (systemd-persistence-scanner)
        entry: bash -c 'cd PROJECTS/beginner/systemd-persistence-scanner && golangci-lint run --fix'
        language: system
        files: ^PROJECTS/beginner/systemd-persistence-scanner/
        types: [go]
        pass_filenames: false

      - id: golangci-lint-sbom-generator
        name: golangci-lint (sbom-generator-vulnerability-matcher)
        entry: bash -c 'cd PROJECTS/intermediate/sbom-generator-vulnerability-matcher && golangci-lint run --fix'
        language: system
        files: ^PROJECTS/intermediate/sbom-generator-vulnerability-matcher/
        exclude: ^PROJECTS/intermediate/sbom-generator-vulnerability-matcher/testdata/
        types: [go]
        pass_filenames: false

      - id: golangci-lint-honeypot-network
        name: golangci-lint (honeypot-network)
        entry: bash -c 'cd PROJECTS/advanced/honeypot-network && golangci-lint run --fix'
        language: system
        files: ^PROJECTS/advanced/honeypot-network/
        exclude: ^PROJECTS/advanced/honeypot-network/frontend/
        types: [go]
        pass_filenames: false

      - id: golangci-lint-monitor-the-situation-dashboard
        name: golangci-lint (monitor-the-situation-dashboard backend)
        entry: bash -c 'cd PROJECTS/advanced/monitor-the-situation-dashboard/backend && golangci-lint run --fix'
        language: system
        files: ^PROJECTS/advanced/monitor-the-situation-dashboard/backend/
        types: [go]
        pass_filenames: false

  # Biome Frontend Checks
  - repo: local
    hooks:
      - id: biome-bug-bounty-platform
        name: biome check (bug-bounty-platform frontend)
        entry: bash -c 'cd PROJECTS/advanced/bug-bounty-platform/frontend && npx @biomejs/biome check .'
        language: system
        files: ^PROJECTS/advanced/bug-bounty-platform/frontend/src/
        pass_filenames: false

      - id: biome-c2-beacon
        name: biome check (c2-beacon frontend)
        entry: bash -c 'cd PROJECTS/beginner/c2-beacon/frontend && npx @biomejs/biome check .'
        language: system
        files: ^PROJECTS/beginner/c2-beacon/frontend/src/
        pass_filenames: false

      - id: biome-api-security-scanner
        name: biome check (api-security-scanner frontend)
        entry: bash -c 'cd PROJECTS/intermediate/api-security-scanner/frontend && npx @biomejs/biome check .'
        language: system
        files: ^PROJECTS/intermediate/api-security-scanner/frontend/src/
        pass_filenames: false

      - id: biome-siem-dashboard
        name: biome check (siem-dashboard frontend)
        entry: bash -c 'cd PROJECTS/intermediate/siem-dashboard/frontend && npx @biomejs/biome check .'
        language: system
        files: ^PROJECTS/intermediate/siem-dashboard/frontend/src/
        pass_filenames: false

      - id: biome-encrypted-p2p-chat
        name: biome check (encrypted-p2p-chat frontend)
        entry: bash -c 'cd PROJECTS/advanced/encrypted-p2p-chat/frontend && npx @biomejs/biome check .'
        language: system
        files: ^PROJECTS/advanced/encrypted-p2p-chat/frontend/src/
        pass_filenames: false

      - id: biome-canary-token-generator
        name: biome check (canary-token-generator frontend)
        entry: bash -c 'cd PROJECTS/beginner/canary-token-generator/frontend && npx @biomejs/biome check .'
        language: system
        files: ^PROJECTS/beginner/canary-token-generator/frontend/src/
        pass_filenames: false

      - id: biome-ai-threat-detection
        name: biome check (ai-threat-detection frontend)
        entry: bash -c 'cd PROJECTS/advanced/ai-threat-detection/frontend && npx @biomejs/biome check .'
        language: system
        files: ^PROJECTS/advanced/ai-threat-detection/frontend/src/
        pass_filenames: false

      - id: biome-binary-analysis-tool
        name: biome check (binary-analysis-tool frontend)
        entry: bash -c 'cd PROJECTS/intermediate/binary-analysis-tool/frontend && npx @biomejs/biome check .'
        language: system
        files: ^PROJECTS/intermediate/binary-analysis-tool/frontend/src/
        pass_filenames: false

      - id: biome-honeypot-network
        name: biome check (honeypot-network frontend)
        entry: bash -c 'cd PROJECTS/advanced/honeypot-network/frontend && npx @biomejs/biome check .'
        language: system
        files: ^PROJECTS/advanced/honeypot-network/frontend/src/
        pass_filenames: false

      - id: biome-monitor-the-situation-dashboard
        name: biome check (monitor-the-situation-dashboard frontend)
        entry: bash -c 'cd PROJECTS/advanced/monitor-the-situation-dashboard/frontend && npx @biomejs/biome check .'
        language: system
        files: ^PROJECTS/advanced/monitor-the-situation-dashboard/frontend/src/
        pass_filenames: false

      - id: biome-ja3-ja4-tls-fingerprinting
        name: biome check (ja3-ja4-tls-fingerprinting frontend)
        entry: bash -c 'cd PROJECTS/intermediate/ja3-ja4-tls-fingerprinting/frontend && pnpm biome check .'
        language: system
        files: ^PROJECTS/intermediate/ja3-ja4-tls-fingerprinting/frontend/src/
        pass_filenames: false

  # Stylelint SCSS Checks
  - repo: local
    hooks:
      - id: stylelint-ja3-ja4-tls-fingerprinting
        name: stylelint (ja3-ja4-tls-fingerprinting frontend)
        entry: bash -c 'cd PROJECTS/intermediate/ja3-ja4-tls-fingerprinting/frontend && pnpm stylelint "**/*.scss"'
        language: system
        files: ^PROJECTS/intermediate/ja3-ja4-tls-fingerprinting/frontend/src/
        pass_filenames: false

  # TypeScript tsc Checks
  - repo: local
    hooks:
      - id: tsc-ja3-ja4-tls-fingerprinting
        name: tsc typecheck (ja3-ja4-tls-fingerprinting frontend)
        entry: bash -c 'cd PROJECTS/intermediate/ja3-ja4-tls-fingerprinting/frontend && pnpm tsc --noEmit'
        language: system
        files: ^PROJECTS/intermediate/ja3-ja4-tls-fingerprinting/frontend/src/
        pass_filenames: false

  # Nim nph Checks
  - repo: local
    hooks:
      - id: nph-credential-enumeration
        name: nph check (credential-enumeration)
        entry: bash -c 'cd PROJECTS/intermediate/credential-enumeration && nph --check src/'
        language: system
        files: ^PROJECTS/intermediate/credential-enumeration/src/
        pass_filenames: false

  # Rust Checks (cargo fmt + clippy)
  - repo: local
    hooks:
      - id: cargo-fmt-binary-analysis-tool
        name: cargo fmt (binary-analysis-tool backend)
        entry: bash -c 'cd PROJECTS/intermediate/binary-analysis-tool/backend && cargo fmt -- --check'
        language: system
        files: ^PROJECTS/intermediate/binary-analysis-tool/backend/
        types: [rust]
        pass_filenames: false

      - id: cargo-clippy-binary-analysis-tool
        name: cargo clippy (binary-analysis-tool backend)
        entry: bash -c 'cd PROJECTS/intermediate/binary-analysis-tool/backend && cargo clippy --all-targets --all-features -- -D warnings'
        language: system
        files: ^PROJECTS/intermediate/binary-analysis-tool/backend/
        types: [rust]
        pass_filenames: false

      - id: cargo-fmt-ja3-ja4-tls-fingerprinting
        name: cargo fmt (ja3-ja4-tls-fingerprinting)
        entry: bash -c 'cd PROJECTS/intermediate/ja3-ja4-tls-fingerprinting && cargo fmt --all -- --check'
        language: system
        files: ^PROJECTS/intermediate/ja3-ja4-tls-fingerprinting/
        types: [rust]
        pass_filenames: false

      - id: cargo-clippy-ja3-ja4-tls-fingerprinting
        name: cargo clippy (ja3-ja4-tls-fingerprinting)
        entry: bash -c 'cd PROJECTS/intermediate/ja3-ja4-tls-fingerprinting && cargo clippy --workspace --all-targets -- -D warnings'
        language: system
        files: ^PROJECTS/intermediate/ja3-ja4-tls-fingerprinting/
        types: [rust]
        pass_filenames: false

  # Crystal Checks (format + ameba + compile)
  - repo: local
    hooks:
      - id: crystal-format-credential-rotation-enforcer
        name: crystal format check (credential-rotation-enforcer)
        entry: bash -c 'cd PROJECTS/intermediate/credential-rotation-enforcer && crystal tool format --check src/ spec/'
        language: system
        files: ^PROJECTS/intermediate/credential-rotation-enforcer/
        types_or: [crystal]
        pass_filenames: false

      - id: ameba-credential-rotation-enforcer
        name: ameba (credential-rotation-enforcer)
        entry: bash -c 'cd PROJECTS/intermediate/credential-rotation-enforcer && bin/ameba src/'
        language: system
        files: ^PROJECTS/intermediate/credential-rotation-enforcer/
        types_or: [crystal]
        pass_filenames: false

      - id: crystal-build-check-credential-rotation-enforcer
        name: crystal compile check (credential-rotation-enforcer)
        entry: bash -c 'cd PROJECTS/intermediate/credential-rotation-enforcer && crystal build --no-codegen src/cre.cr'
        language: system
        files: ^PROJECTS/intermediate/credential-rotation-enforcer/
        types_or: [crystal]
        pass_filenames: false

  # V (Vlang) Checks
  - repo: local
    hooks:
      - id: v-fmt-firewall-rule-engine
        name: v fmt (firewall-rule-engine)
        entry: bash -c 'cd PROJECTS/beginner/firewall-rule-engine && v fmt -verify src/'
        language: system
        files: ^PROJECTS/beginner/firewall-rule-engine/src/
        pass_filenames: false

      - id: v-vet-firewall-rule-engine
        name: v vet (firewall-rule-engine)
        entry: bash -c 'cd PROJECTS/beginner/firewall-rule-engine && v vet src/'
        language: system
        files: ^PROJECTS/beginner/firewall-rule-engine/src/
        pass_filenames: false

  # C++ Checks (clang-format + cppcheck)
  - repo: local
    hooks:
      - id: clang-format-hash-cracker
        name: clang-format (hash-cracker)
        entry: bash -c 'cd PROJECTS/beginner/hash-cracker && find . \( -path ./build -o -path ./cmake-build -o -path ./.git \) -prune -o \( -name "*.cpp" -o -name "*.hpp" -o -name "*.h" \) -print 2>/dev/null | xargs -r clang-format --dry-run --Werror'
        language: system
        files: ^PROJECTS/beginner/hash-cracker/
        types_or: [c++, c]
        pass_filenames: false

      - id: cppcheck-hash-cracker
        name: cppcheck (hash-cracker)
        entry: bash -c 'cd PROJECTS/beginner/hash-cracker && cppcheck --enable=warning,style,performance,portability --error-exitcode=1 --suppress=missingIncludeSystem --suppress=normalCheckLevelMaxBranches -i build -i cmake-build -q .'
        language: system
        files: ^PROJECTS/beginner/hash-cracker/
        types_or: [c++, c]
        pass_filenames: false

      - id: clang-format-simple-port-scanner
        name: clang-format (simple-port-scanner)
        entry: bash -c 'cd PROJECTS/beginner/simple-port-scanner && find . \( -path ./build -o -path ./cmake-build -o -path ./.git \) -prune -o \( -name "*.cpp" -o -name "*.hpp" -o -name "*.h" \) -print 2>/dev/null | xargs -r clang-format --dry-run --Werror'
        language: system
        files: ^PROJECTS/beginner/simple-port-scanner/
        types_or: [c++, c]
        pass_filenames: false

      - id: cppcheck-simple-port-scanner
        name: cppcheck (simple-port-scanner)
        entry: bash -c 'cd PROJECTS/beginner/simple-port-scanner && cppcheck --enable=warning,style,performance,portability --error-exitcode=1 --suppress=missingIncludeSystem --suppress=normalCheckLevelMaxBranches -i build -i cmake-build -q .'
        language: system
        files: ^PROJECTS/beginner/simple-port-scanner/
        types_or: [c++, c]
        pass_filenames: false

      - id: clang-format-network-traffic-analyzer-cpp
        name: clang-format (network-traffic-analyzer/cpp)
        entry: bash -c 'cd PROJECTS/beginner/network-traffic-analyzer/cpp && find . \( -path ./build -o -path ./cmake-build -o -path ./.git \) -prune -o \( -name "*.cpp" -o -name "*.hpp" -o -name "*.h" \) -print 2>/dev/null | xargs -r clang-format --dry-run --Werror'
        language: system
        files: ^PROJECTS/beginner/network-traffic-analyzer/cpp/
        types_or: [c++, c]
        pass_filenames: false

      - id: cppcheck-network-traffic-analyzer-cpp
        name: cppcheck (network-traffic-analyzer/cpp)
        entry: bash -c 'cd PROJECTS/beginner/network-traffic-analyzer/cpp && cppcheck --enable=warning,style,performance,portability --error-exitcode=1 --suppress=missingIncludeSystem --suppress=normalCheckLevelMaxBranches -i build -i cmake-build -q .'
        language: system
        files: ^PROJECTS/beginner/network-traffic-analyzer/cpp/
        types_or: [c++, c]
        pass_filenames: false

  # Bash (shellcheck)
  - repo: local
    hooks:
      - id: shellcheck-linux-cis-hardening-auditor
        name: shellcheck (linux-cis-hardening-auditor)
        entry: bash -c 'find PROJECTS/beginner/linux-cis-hardening-auditor -name "*.sh" -not -path "*/.venv/*" | xargs -r shellcheck'
        language: system
        files: ^PROJECTS/beginner/linux-cis-hardening-auditor/.*\.sh$
        pass_filenames: false

  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v6.0.0
    hooks:
      - id: check-yaml
        exclude: (\.pnpm-store|node_modules)/
      - id: check-json
        exclude: (\.pnpm-store|node_modules)/
      - id: check-toml
        exclude: (\.pnpm-store|node_modules)/
      - id: check-ast
        exclude: (\.pnpm-store|node_modules|\.venv)/
      - id: check-symlinks
        exclude: (\.pnpm-store|node_modules)/
      - id: end-of-file-fixer
        exclude: (\.pnpm-store|node_modules)/|^PROJECTS/advanced/hsm-emulator/vendor/|^PROJECTS/intermediate/ja3-ja4-tls-fingerprinting/crates/tlsfp-intel/seeds/
      - id: trailing-whitespace
        exclude: (\.pnpm-store|node_modules)/|^PROJECTS/advanced/hsm-emulator/vendor/|^PROJECTS/intermediate/ja3-ja4-tls-fingerprinting/crates/tlsfp-intel/seeds/
      - id: check-illegal-windows-names
        exclude: (\.pnpm-store|node_modules)/
      - id: check-executables-have-shebangs
        exclude: (\.pnpm-store|node_modules)/
      - id: check-shebang-scripts-are-executable
        exclude: (\.pnpm-store|node_modules)/