.check_pre_commit_template:
  extends:
    - .before_script:minimal
  stage: pre_check
  image: "${CI_REGISTRY}/ci/images/pre-commit-idf:1"
  tags: [pre-commit]
  variables:
    # Both shiny and brew runners can pick this job
    GIT_STRATEGY: fetch
    GIT_DEPTH: 1
    SUBMODULES_TO_FETCH: "all"
  needs:
    - pipeline_variables
  script:
    - fetch_submodules
    - pre-commit run --files $MODIFIED_FILES
    - pre-commit run --hook-stage post-commit validate-sbom-manifest

check_pre_commit:
  extends:
    - .check_pre_commit_template
  rules:
    - if: '($CI_COMMIT_REF_NAME == "master" || $CI_COMMIT_BRANCH =~ /^release\/v/) && $CI_PIPELINE_SOURCE == "push"'
      when: never
    - when: on_success
  cache:
    - key: submodule-cache-${LATEST_GIT_TAG}
      paths:
        - .cache/submodule_archives
      policy: pull