Copilot commented on code in PR #12932:
URL: https://github.com/apache/cloudstack/pull/12932#discussion_r3015867305


##########
.pre-commit-config.yaml:
##########
@@ -31,6 +31,14 @@ repos:
       - id: doctoc
         name: Add TOC for Markdown files
         files: ^CONTRIBUTING\.md$|^INSTALL\.md$|^README\.md$
+  - repo: local
+    hooks:
+      - id: validate-dependabot-yml
+        name: Validate dependabot.yml
+        entry: npx @bugron/[email protected]
+        language: system

Review Comment:
   Using `language: system` with an `npx [email protected]` entry makes this hook 
depend on whatever Node/npm/npx happens to be installed on the developer 
machine (and may not run at all if `npx` isn’t available/in PATH). To make the 
manual hook reproducible and cross-platform, configure it as a `language: node` 
hook with `additional_dependencies: ['@bugron/[email protected]']` 
and set `entry` to the installed CLI (so pre-commit manages the Node 
environment and caching).
   ```suggestion
           entry: validate-dependabot-yaml
           language: node
           additional_dependencies: ['@bugron/[email protected]']
   ```



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to