.pre-commit-config.yaml 942 B

123456789101112131415161718192021222324252627
  1. repos:
  2. - repo: https://github.com/gruntwork-io/pre-commit
  3. rev: v0.1.17 # Get the latest from: https://github.com/gruntwork-io/pre-commit/releases
  4. hooks:
  5. - id: tflint
  6. args:
  7. - "--init"
  8. - "--config=.tflint.hcl"
  9. - id: tflint
  10. args:
  11. # - "--module"
  12. - "--config=.tflint.hcl"
  13. - id: terraform-validate
  14. - id: terraform-fmt
  15. - repo: https://github.com/antonbabenko/pre-commit-terraform
  16. rev: v1.76.0 # Get the latest from: https://github.com/antonbabenko/pre-commit-terraform/releases
  17. hooks:
  18. - id: terraform_tfsec
  19. args:
  20. - --args=--config-file .tfsec.yaml
  21. - id: terraform_docs
  22. # checkov is good, but too thorough for our needs
  23. # - id: terraform_checkov
  24. # args:
  25. # - --args=--quiet
  26. # - --args=--skip-check CKV_AWS_144 # we don't cross-region replicate our s3
  27. #- "--skip-check", "CKV_AWS_150", # We do not enable deletion protection for LBs