Pre-commit Standards

Version: 2025.1

Standard pre-commit configuration for repository compliance.

Standard Versions (2025.1)

Hook Version Purpose

pre-commit-hooks v5.0.0 Core hooks (trailing-whitespace, check-yaml, etc.)

conventional-pre-commit v4.3.0 Conventional commit message validation

biome v0.4.0 Code formatting and linting (JS, TS, JSON)

gruntwork pre-commit v0.1.29 helmlint, tflint (infrastructure only)

actionlint v1.7.7 GitHub Actions validation (infrastructure only)

helm-docs v1.14.2 Helm documentation (infrastructure only)

gitleaks v8.22.1 Secret scanning (recommended)

Project Type Configurations

Frontend App (Vue/React)

Required hooks for frontend applications:

default_install_hook_types:

• pre-commit
• commit-msg

repos:

• repo: https://github.com/pre-commit/pre-commit-hooks rev: v5.0.0 hooks:

  • id: trailing-whitespace
  • id: end-of-file-fixer
  • id: check-yaml exclude: ^(helm/templates/|skaffold/|k8s/).*.ya?ml$
  • id: check-json exclude: tsconfig.json$
  • id: check-added-large-files args: ['--maxkb=1000']
  • id: check-merge-conflict
  • id: detect-private-key

• repo: https://github.com/compilerla/conventional-pre-commit rev: v4.3.0 hooks:

  • id: conventional-pre-commit stages: [commit-msg]

• repo: https://github.com/biomejs/pre-commit rev: v0.4.0 hooks:

  • id: biome-check additional_dependencies: ["@biomejs/biome@1.9.4"]

Optional: If project has Helm charts

• repo: https://github.com/gruntwork-io/pre-commit rev: v0.1.29 hooks:
  • id: helmlint files: ^helm/

Infrastructure Repository

Required hooks for infrastructure (Terraform, Helm, ArgoCD):

default_install_hook_types:

• pre-commit
• commit-msg

repos:

• repo: https://github.com/pre-commit/pre-commit-hooks rev: v5.0.0 hooks:

  • id: trailing-whitespace
  • id: end-of-file-fixer
  • id: check-yaml args: [--allow-multiple-documents] exclude: argocd/.*templates/|helm/[^/]+/templates/
  • id: check-json
  • id: check-merge-conflict
  • id: check-symlinks
  • id: check-toml
  • id: check-added-large-files

• repo: https://github.com/compilerla/conventional-pre-commit rev: v4.3.0 hooks:

  • id: conventional-pre-commit stages: [commit-msg]

• repo: https://github.com/gruntwork-io/pre-commit rev: v0.1.29 hooks:

  • id: tflint
  • id: helmlint

• repo: https://github.com/rhysd/actionlint rev: v1.7.7 hooks:

  • id: actionlint

• repo: https://github.com/norwoodj/helm-docs rev: v1.14.2 hooks:

  • id: helm-docs args:
    • --chart-search-root=helm

• repo: https://github.com/gitleaks/gitleaks rev: v8.22.1 hooks:

  • id: gitleaks

Python Service

Required hooks for Python projects:

default_install_hook_types:

• pre-commit
• commit-msg

repos:

• repo: https://github.com/pre-commit/pre-commit-hooks rev: v5.0.0 hooks:

  • id: trailing-whitespace
  • id: end-of-file-fixer
  • id: check-yaml
  • id: check-json
  • id: check-toml
  • id: check-added-large-files
  • id: check-merge-conflict
  • id: detect-private-key

• repo: https://github.com/compilerla/conventional-pre-commit rev: v4.3.0 hooks:

  • id: conventional-pre-commit stages: [commit-msg]

• repo: https://github.com/astral-sh/ruff-pre-commit rev: v0.8.4 hooks:

  • id: ruff args: [--fix]
  • id: ruff-format

• repo: https://github.com/gitleaks/gitleaks rev: v8.22.1 hooks:

  • id: gitleaks

Compliance Checking

Required Base Hooks (All Projects)

Every repository MUST have these hooks:

pre-commit-hooks (v5.0.0+)

• trailing-whitespace

• end-of-file-fixer

• check-yaml

• check-json

• check-merge-conflict

• check-added-large-files

conventional-pre-commit (v4.3.0+)

• conventional-pre-commit in commit-msg stage

Status Levels

Status Meaning

PASS Hook present with compliant version

WARN Hook present but version outdated

FAIL Required hook missing

SKIP Hook not applicable for project type

Version Comparison

When checking versions:

• Exact match or newer: PASS

• Older by patch version: WARN (functional but should update)

• Missing entirely: FAIL (must add)

Exclusion Patterns

Frontend Apps

Exclude Kubernetes/Helm templates from YAML/prettier checks:

exclude: ^(helm/templates/|skaffold/|k8s/).*.ya?ml$

Infrastructure

Exclude ArgoCD and Helm templates:

exclude: argocd/.*templates/|helm/[^/]+/templates/

Python

No special exclusions needed for standard Python projects.

Installation

After configuring .pre-commit-config.yaml :

pre-commit install pre-commit install --hook-type commit-msg

Or simply:

pre-commit install --install-hooks

Updating

To update all hooks to latest versions:

pre-commit autoupdate

Then verify versions match project standards.