repos:
- repo: local
  hooks:
    - id: run-make-generate-root
      name: Run 'make generate' at repo root
      entry: |
        flock -x .git/pre-commit.lock sh -c '
          echo "Running make generate at repo root"
          make generate || exit $?
          git diff --color=always | cat
        '
      language: system
      files: ^(api/|pkg/apis/|pkg/generated/|internal/crdinstall/manifests/|packages/system/cozystack-controller/definitions/|packages/system/application-definition-crd/definition/|packages/system/backup-controller/definitions/|packages/system/backupstrategy-controller/definitions/|hack/update-codegen\.sh$|hack/boilerplate\.go\.txt$|Makefile$)
      pass_filenames: false
    - id: run-make-generate
      name: Run 'make generate' in all app directories
      entry: |
        flock -x .git/pre-commit.lock sh -c '
          for dir in ./packages/apps/*/ ./packages/extra/*/; do
            if [ -d "$dir" ]; then
              echo "Running make generate in $dir"
              make generate -C "$dir" || exit $?
            fi
          done
          git diff --color=always | cat
        '
      language: system
      files: ^.*$
# Lints changed GitHub Actions workflows for unpinned actions and excessive token
# permissions (audit scope is set in .github/zizmor.yml). Runs offline so it needs
# no GitHub token locally. The same gate runs tree-wide in .github/workflows/zizmor.yml.
- repo: https://github.com/zizmorcore/zizmor-pre-commit
  rev: v1.26.1
  hooks:
    - id: zizmor
      args: [--offline]