chore: standardize pre-commit hooks

Author: bakerboy448

.pre-commit-config.yaml

@@ -2,14 +2,59 @@ repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v6.0.0
     hooks:
-      - id: trailing-whitespace
-      - id: end-of-file-fixer
       - id: check-yaml
-      - id: check-added-large-files
+      - id: check-json
+        files: \.json$
       - id: check-merge-conflict
+      - id: end-of-file-fixer
+      - id: trailing-whitespace
+      - id: no-commit-to-branch
+        args: ['--branch', 'master']
+      - id: check-added-large-files
       - id: debug-statements
       - id: check-executables-have-shebangs
 
+  - repo: https://github.com/rhysd/actionlint
+    rev: v1.7.7
+    hooks:
+      - id: actionlint
+
+  - repo: https://github.com/Yelp/detect-secrets
+    rev: v1.5.0
+    hooks:
+      - id: detect-secrets
+        args: ['--baseline', '.secrets.baseline']
+        exclude: |
+          (?x)^(
+              config_template\.json|
+              \.secrets\.baseline|
+              systemd/.*|
+              README\.md|
+              CLAUDE\.md
+          )$
+
+  - repo: https://github.com/shellcheck-py/shellcheck-py
+    rev: v0.10.0.1
+    hooks:
+      - id: shellcheck
+        types: [shell]
+
+  - repo: local
+    hooks:
+      - id: shfmt
+        name: shfmt
+        entry: shfmt
+        language: system
+        args: [--diff, --indent, '2', --case-indent, --binary-next-line]
+        types: [shell]
+      - id: reddit-config-check
+        name: Check Reddit config safety
+        # yamllint disable-line rule:line-length
+        entry: python -c "import json,os;c=json.load(open('config.json')) if os.path.exists('config.json') else {};exit(1) if not c.get('anonymize_moderators',True) else exit(0)"
+        language: system
+        files: config\.json$
+        pass_filenames: false
+
   - repo: https://github.com/psf/black-pre-commit-mirror
     rev: 26.1.0
     hooks:
@@ -29,32 +74,15 @@ repos:
       - id: isort
         args: [--profile=black]
 
-  - repo: https://github.com/Yelp/detect-secrets
-    rev: v1.5.0
-    hooks:
-      - id: detect-secrets
-        args: ['--baseline', '.secrets.baseline']
-        exclude: |
-          (?x)^(
-              config_template\.json|
-              \.secrets\.baseline|
-              systemd/.*|
-              README\.md|
-              CLAUDE\.md
-          )$
-
   - repo: https://github.com/pre-commit/mirrors-mypy
     rev: v1.19.1
     hooks:
       - id: mypy
         additional_dependencies: [types-requests]
         args: [--ignore-missing-imports]
 
-  - repo: local
+  - repo: https://github.com/adrienverge/yamllint
+    rev: v1.35.1
     hooks:
-      - id: reddit-config-check
-        name: Check Reddit config safety
-        entry: python -c "import json; config = json.load(open('config.json')) if __import__('os').path.exists('config.json') else {}; exit(1) if not config.get('anonymize_moderators', True) else exit(0)"
-        language: system
-        files: config\.json$
-        pass_filenames: false
+      - id: yamllint
+        args: [--config-file, .yamllint.yml]

.yamllint.yml

@@ -0,0 +1,10 @@
+extends: default
+
+rules:
+  line-length:
+    max: 200
+  truthy:
+    check-keys: false
+  comments:
+    min-spaces-from-content: 1
+  document-start: disable