.pre-commit-hooks.yaml

---

# For use with pre-commit.
# See usage instructions at http://pre-commit.com

-   id: checkov
    name: Checkov
    description: This hook runs checkov.
    entry: checkov -d .
    language: python
    pass_filenames: false
    always_run: false
    files: \.tf$
    exclude: \.+.terraform\/.*$
    require_serial: true

-   id: checkov_diff
    name: Checkov Diff
    description: This hook runs checkov against all changed files.
    entry: checkov --enable-secret-scan-all-files -f
    language: python
    require_serial: true

-   id: checkov_secrets
    name: Checkov Secrets
    description: This hook looks for secrets with checkov.
    entry: checkov --framework secrets --enable-secret-scan-all-files -f
    language: python
    always_run: true
    require_serial: true