🎣 feat: comprehensive git hooks and CI pipeline setup

[christoph2806]

🎣 Comprehensive Git Hooks & CI Pipeline Setup

This PR implements a complete git hooks and CI pipeline system for the AI Command Auditor project, ensuring code quality, security, and consistency across all contributions.

🚀 What's New

Pre-commit Hooks (Python-based)

• Automated code formatting with Black and isort
• Code quality analysis with Pylint and MyPy
• Security scanning with Bandit
• Shell script validation with ShellCheck
• Documentation linting for Markdown and YAML
• File hygiene checks (trailing whitespace, etc.)

Pre-push Hooks (Git native)

• Comprehensive testing before push
• Integration test validation
• Security vulnerability scanning
• All pre-commit checks plus unit tests

GitHub Actions CI Pipeline

• Multi-version Python testing (3.8, 3.9, 3.10, 3.11)
• Cross-platform testing (Ubuntu, macOS, Windows)
• Security scanning with Bandit and Safety
• Coverage reporting with pytest-cov
• Automated dependency updates

Developer Experience

• One-command setup: ./scripts/setup-hooks.sh
• Automatic code formatting on every commit
• Early error detection before CI
• Comprehensive documentation in HOOKS_SETUP.md

📁 Files Added/Modified

Configuration Files

• .pre-commit-config.yaml - Pre-commit hook configuration
• .github/workflows/ci.yml - GitHub Actions CI pipeline
• requirements-dev.txt - Development dependencies (rewritten)

Setup & Documentation

• scripts/setup-hooks.sh - One-command installation script
• HOOKS_SETUP.md - Comprehensive documentation
• docs/planning/task-planning.md - Task planning and tracking

Hook Scripts

• scripts/hooks/pre-commit.sh - Custom pre-commit validation
• scripts/hooks/pre-push.sh - Pre-push testing script

Core Implementation (Tasks 1-6)

• scripts/python/core/config.py - Centralized configuration system
• scripts/python/core/security.py - Security validation module
• scripts/python/core/check_command.py - OpenAI integration (rewritten)
• config/config.yml - Project configuration
• scripts/rules/python-auditor/check_command_rules.yml - Security rules

🛡️ Security & Quality Features

Automated Security Scanning

• Bandit: Python vulnerability detection
• Safety: Dependency vulnerability checking
• Secret detection: Prevents committing sensitive data
• Shell security: ShellCheck for bash script security

Code Quality Enforcement

• Black: Consistent Python formatting
• isort: Import organization
• Pylint: Code quality analysis
• MyPy: Static type checking

Testing Integration

• pytest: Unit testing framework
• Coverage reporting: Code coverage analysis
• Integration tests: End-to-end validation
• Multi-environment testing: CI across Python versions

🎯 Benefits

For Developers

• ✅ Never worry about formatting - automatic Black formatting
• ✅ Catch issues early - pre-commit validation
• ✅ Security awareness - automatic vulnerability scanning
• ✅ Quality assurance - consistent code standards

For the Project

• ✅ Consistent codebase - uniform styling across all files
• ✅ Reduced CI failures - issues caught locally first
• ✅ Security by default - automatic vulnerability detection
• ✅ Professional standards - enterprise-grade quality gates

For Collaboration

• ✅ Clean git history - no style-only commits
• ✅ Faster code reviews - focus on logic, not formatting
• ✅ Reliable builds - CI passes consistently
• ✅ Quality PRs - all submissions meet standards

🔧 Usage

Quick Setup

# One command setup
./scripts/setup-hooks.sh

Manual Testing

# Test pre-commit hooks
git add . && git commit -m "test"

# Test pre-push hooks
git push origin feature-branch

# Run checks manually
pre-commit run --all-files

✅ Validation

Hooks Tested & Working

• ✅ Pre-commit formatting (Black, isort)
• ✅ Code quality checks (Pylint, MyPy)
• ✅ Security scanning (Bandit)
• ✅ Shell validation (ShellCheck)
• ✅ Pre-push testing pipeline
• ✅ Integration with existing code

CI Pipeline Tested

• ✅ GitHub Actions workflow
• ✅ Multi-version Python testing
• ✅ Security vulnerability scanning
• ✅ Test coverage reporting

📋 Task Completion

This PR completes the following tasks from docs/planning/task-planning.md:

• ✅ Task 1: Path Configuration - Centralized config system
• ✅ Task 2: Rule File Extension - YAML rule handling
• ✅ Task 3: Security Hardening - Security validation module
• ✅ Task 4: OpenAI Integration - Complete rewrite with proper API
• ✅ Task 6: Configuration Management - Unified config system
• ✅ CI/CD Pipeline: Complete GitHub Actions setup
• ✅ Git Hooks: Comprehensive pre-commit/pre-push system

🚦 Ready for Review

This PR is ready for review and testing. The git hooks will:

• Automatically format code on commit
• Catch security issues before push
• Ensure all tests pass before remote push
• Maintain consistent code quality

No breaking changes - all existing functionality preserved and enhanced.

📚 Documentation

See HOOKS_SETUP.md for complete setup and usage documentation.