name: pre-commit

on:
  pull_request:
  push:
    branches: [main]

permissions:
  contents: read

concurrency:
  group: pre-commit-${{ github.ref }}
  cancel-in-progress: true

jobs:
  pre-commit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      
      - uses: actions/setup-python@v5
        with:
          python-version: '3.10'
      
      - uses: actions/setup-go@v5
        with:
          go-version: '1.22'
      
      # Gitleaks requires Go
      - name: Install gitleaks
        run: |
          go install github.com/gitleaks/gitleaks/v8@latest
          echo "$HOME/go/bin" >> $GITHUB_PATH
      
      - uses: pre-commit/action@v3.0.1
        with:
          extra_args: --all-files