.hookz.yaml

  version: 2.4.0
  sources:
    - source: github.com/anchore/syft/cmd/syft@latest
    - source: github.com/devops-kung-fu/hinge@latest
    - source: github.com/kisielk/errcheck@latest      
    - source: honnef.co/go/tools/cmd/staticcheck@latest
    - source: github.com/fzipp/gocyclo/cmd/gocyclo@latest
  hooks:
    - type: pre-commit
      actions:
        - name: "git: Pull (Ensure there are no upstream changes that are not local)"
          exec: git
          args: ["pull"]  
        - name: "go: Tidy mod file"
          exec: go
          args: ["mod", "tidy"]
        - name: "go: Update all dependencies to latest"
          exec: go
          args: ["get", "-u", "./..."]
        - name: "gofmt: Run gofmt to format the code"
          exec: gofmt
          args: ["-s", "-w", "**/*.go"]
        - name: "staticcheck: Lint all go files"
          exec: staticcheck
          args: ["-f", "stylish", "-checks", "all", "./..."] #to error out, add the arg "-set_exit_status"
        - name: "errcheck: Ensure that errors are checked"
          exec: errcheck
          args: ["-ignoretests", "./..."]
        - name: "gocyclo: Check cyclomatic complexities"
          exec: gocyclo
          args: ["-over", "4", "."]
        - name: Hinge
          exec: hinge
          args: ["."]
        - name: "go: Build (Ensure pulled modules do not break the build)"
          exec: go
          args: ["build", "-v", "./..."]
        - name: "go: Run all tests"
          exec: go
          args: ["test", "-v", "-coverprofile=coverage.out", "./..."]
        - name: "go: Test coverage"
          exec: go
          args: ["tool", "cover", "-func=coverage.out"]
        - name: "syft: Generate a Software Bill of Materials (SBoM)"
          script: "
            #!/bin/bash \n
            syft . -o cyclonedx-json=sbom/common.cyclonedx.json &> /dev/null \n
            "
        - name: "git: Add all changed files during the pre-commit stage"
          exec: git
          args: ["add", "."]