.pre-commit-config.yaml

default_stages: [pre-commit]
repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v5.0.0
    hooks:
      - id: trailing-whitespace
      - id: end-of-file-fixer
      - id: check-yaml
      - id: check-added-large-files
      - id: check-case-conflict
      - id: check-merge-conflict
  - repo: https://github.com/antonbabenko/pre-commit-terraform
    rev: v1.96.3
    hooks:
      - id: terraform_fmt
        args:
          - --args=-recursive
        exclude: '.*/\.terragrunt-cache'
      - id: terraform_validate
      - id: terraform_tflint
      - id: terraform_trivy
      - id: terraform_docs
        args:
          - --hook-config=--add-to-existing-file=true # Boolean. true or false
          - --hook-config=--create-file-if-not-exist=true # Boolean. true or false
          - --args=--output-mode=replace
      - id: tfupdate
        name: Autoupdate Terraform versions
        args:
          - --args=provider azurerm # Will be pined to latest version
  - repo: https://github.com/bridgecrewio/checkov.git
    rev: "3.2.346" # change to tag or sha
    hooks:
      - id: checkov
        verbose: true
        args: ["--quiet", "--compact", "--soft-fail"]
  - repo: https://github.com/bridgecrewio/yor
    rev: 0.1.199
    hooks:
      - id: yor
        name: yor
        entry: yor tag -d
        args: ["."]
        language: golang
        types: [terraform]
        pass_filenames: false