feat(pre-commit): add detect-secrets, nbstripout and other standard pre-commit hooks

Author: teeuwski

template/.claude/settings.json

@@ -1,21 +1,4 @@
 {
-  "sandbox": {
-    "enabled": true,
-    "autoAllowBashIfSandboxed": true,
-    "excludedCommands": [
-      "docker",
-      "git"
-    ],
-    "network": {
-      "allowedDomains": [
-        "github.com"
-      ],
-      "allowUnixSockets": [
-        "/var/run/docker.sock"
-      ],
-      "allowLocalBinding": true
-    }
-  },
   "permissions": {
     "allow": [
       "Bash(git commit *)",
@@ -31,5 +14,22 @@
       "Read(.env.*)",
       "Read(~/.aws/**)"
     ]
+  },
+  "sandbox": {
+    "autoAllowBashIfSandboxed": true,
+    "enabled": true,
+    "excludedCommands": [
+      "docker",
+      "git"
+    ],
+    "network": {
+      "allowLocalBinding": true,
+      "allowUnixSockets": [
+        "/var/run/docker.sock"
+      ],
+      "allowedDomains": [
+        "github.com"
+      ]
+    }
   }
 }

template/.pre-commit-config.yaml.jinja

@@ -14,6 +14,29 @@ repos:
   - id: yamllint
     args: [-d, "{extends: relaxed, rules: {line-length: disable} }"]
     verbose: true
+- repo: https://github.com/Yelp/detect-secrets
+  rev: v1.5.0
+  hooks:
+  - id: detect-secrets
+    exclude: ^\.venv/
+- repo: https://github.com/kynan/nbstripout
+  rev: '0.9.1'
+  hooks:
+  - id: nbstripout
+    files: \.ipynb$
+- repo: https://github.com/pre-commit/pre-commit-hooks
+  rev: v5.0.0
+  hooks:
+  - id: mixed-line-ending
+    args: [--fix=lf]
+  - id: end-of-file-fixer
+  - id: trailing-whitespace
+  - id: check-added-large-files
+  - id: check-merge-conflict
+  - id: check-case-conflict
+  - id: check-symlinks
+  - id: pretty-format-json
+    args: [--autofix]
 - repo: local
   hooks:
   - id: ty

template/LICENSE.jinja

@@ -20,8 +20,7 @@ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
-
-{% elif license == "Apache-2.0" -%}
+{%- elif license == "Apache-2.0" -%}
 Copyright {{ "%Y" | strftime }} {{ author_name }}
 
    Licensed under the Apache License, Version 2.0 (the "License");
@@ -35,8 +34,7 @@ Copyright {{ "%Y" | strftime }} {{ author_name }}
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
-
-{% elif "GPL-3.0" in license -%}
+{%- elif "GPL-3.0" in license -%}
 {{ project_name }}: {{ project_short_description }}
 Copyright (C) {{ "%Y" | strftime }} {{ author_name }}
 
@@ -52,5 +50,4 @@ GNU General Public License for more details.
 
 You should have received a copy of the GNU General Public License
 along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-{% endif -%}
+{%- endif %}

template/pyproject.toml.jinja

@@ -154,4 +154,4 @@ forbidden_modules = [
     "requests",
     "sqlalchemy",
 ]
-{% endif %}
+{%- endif %}