From 6691843a408a80b00849d49c46d6688cbd653519 Mon Sep 17 00:00:00 2001
From: John Bampton <jbampton@gmail.com>
Date: Wed, 28 Jan 2026 02:18:02 +1000
Subject: [PATCH 1/2] Add more pre-commit hooks

---
 .../workflows/{lint.yml => pre-commit.yml}    |  0
 .pre-commit-config.yaml                       | 40 ++++++++++++++++++-
 2 files changed, 39 insertions(+), 1 deletion(-)
 rename .github/workflows/{lint.yml => pre-commit.yml} (100%)

diff --git a/.github/workflows/lint.yml b/.github/workflows/pre-commit.yml
similarity index 100%
rename from .github/workflows/lint.yml
rename to .github/workflows/pre-commit.yml
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 8138db9d..61a057ad 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -12,7 +12,13 @@ exclude: |
   )
 
 repos:
-  # Standard pre-commit hooks for basic file checks
+  - repo: meta
+    hooks:
+      - id: identity
+        name: Run identity
+        description: Run the identity check
+      - id: check-hooks-apply
+        name: Check hooks apply to the repository
   - repo: local
     hooks:
       - id: check-zip-file-is-not-committed
@@ -23,6 +29,38 @@ repos:
           Zip files are not allowed in the repository as they are hard to
           track and have security implications. Please remove the zip file from the repository.
         files: (?i)\.zip$
+      - id: npm-ci
+        name: Install Node dependencies
+        entry: npm ci
+        language: system
+        pass_filenames: false
+      - id: eleventy-build-check
+        name: Eleventy build and output check
+        entry: npm run build
+        language: system
+        pass_filenames: false
+      - id: npm-audit
+        name: Run npm-audit
+        description: Run npm audit
+        entry: npm audit --audit-level=high
+        language: system
+        pass_filenames: false
+  # GO-based
+  # - repo: https://github.com/gitleaks/gitleaks
+  #   rev: v8.30.0
+  #   hooks:
+  #     - id: gitleaks
+  #       name: Run gitleaks
+  #       description: Check for secrets with gitleaks
+  - repo: https://github.com/Lucas-C/pre-commit-hooks
+    rev: v1.5.5
+    hooks:
+      - id: chmod
+        name: Set file permissions
+        description: Does not run on Windows so setup as a manual hook
+        args: ["644"]
+        files: \.md$
+        stages: [manual]
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v6.0.0
     hooks:

From 369faa6047e0e5052adf754ec652cf8d5de3d91c Mon Sep 17 00:00:00 2001
From: John Bampton <jbampton@gmail.com>
Date: Wed, 28 Jan 2026 02:22:10 +1000
Subject: [PATCH 2/2] update hooks

---
 .pre-commit-config.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 61a057ad..7f84a9b4 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -53,7 +53,7 @@ repos:
   #       name: Run gitleaks
   #       description: Check for secrets with gitleaks
   - repo: https://github.com/Lucas-C/pre-commit-hooks
-    rev: v1.5.5
+    rev: v1.5.6
     hooks:
       - id: chmod
         name: Set file permissions