Audit implementation: correctness, streaming honesty, speed, and a smaller core #823

	name: pre-commit

	# Run repository hygiene, Ruff, mypy, and Bandit hooks on pull requests.
	# Commit-message hooks are exercised separately by commit-hygiene.yml because
	# pre-commit/action runs the pre-commit stage, not the commit-msg stage.
	on:
	pull_request:

	permissions:
	contents: read

	jobs:
	pre-commit:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
	with:
	# This job runs code the pull request controls; the token has no business staying
	# in .git/config while it does.
	persist-credentials: false

	- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
	with:
	python-version: "3.13"

	- uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1

Navigation Menu