python-api-server/.woodpecker/lint.yml

---
steps:
  gitleaks:
    image: zricethezav/gitleaks:v8.18.2
    commands:
      - gitleaks detect --no-git --verbose --source $CI_WORKSPACE
    when:
      - event: [push, pull_request, cron]
        evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'

  hadolint:
    image: pipelinecomponents/hadolint:0.26.2
    commands:
      - hadolint Dockerfile
    when:
      - event: [push, pull_request, cron]
        evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'

  pylint:
    image: "registry.mgrote.net/pylint:master"
    commands:
      - pip3 install --no-cache-dir --break-system-packages -r requirements.txt
      - pylint app.py
    when:
      - event: [push, pull_request, cron]
        evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'

  shellcheck:
    image: koalaman/shellcheck-alpine:v0.10.0
    commands:
      - |
        find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do
          if echo "$line" | grep -q "shell script"; then
            file_path=$(echo "$line" | awk -F':' '{print $1}')
            shellcheck "$file_path"
          fi
        done
    when:
      - event: [push, pull_request, cron]
        evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
...