Align pre-commit with CI

[vegcom]

Review pre-commit hooks alignment with CI.

[vegcom]

Run pre-commit run --all-files
[INFO] Initializing environment for https://github.com/pre-commit/pre-commit-hooks.
[INFO] Initializing environment for https://github.com/astral-sh/ruff-pre-commit.
[INFO] Initializing environment for https://github.com/pycqa/flake8.
[INFO] Initializing environment for https://github.com/pycqa/flake8:flake8-bugbear,flake8-comprehensions,flake8-pyproject,dlint.
[INFO] Initializing environment for https://github.com/pre-commit/mirrors-mypy.
[INFO] Initializing environment for https://github.com/pre-commit/mirrors-mypy:types-requests,types-python-dateutil.
[INFO] Initializing environment for https://github.com/asottile/pyupgrade.
[INFO] Initializing environment for https://github.com/bridgecrewio/checkov.
[INFO] Initializing environment for https://github.com/jorisroovers/gitlint.
[INFO] Initializing environment for https://github.com/jorisroovers/gitlint:./gitlint-core[trusted-deps].
[INFO] Initializing environment for https://github.com/python-jsonschema/check-jsonschema.
[INFO] Initializing environment for https://github.com/shellcheck-py/shellcheck-py.
[INFO] Initializing environment for https://github.com/pre-commit/sync-pre-commit-deps.
[INFO] Installing environment for https://github.com/pre-commit/pre-commit-hooks.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/astral-sh/ruff-pre-commit.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/pycqa/flake8.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/pre-commit/mirrors-mypy.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/asottile/pyupgrade.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/bridgecrewio/checkov.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/python-jsonschema/check-jsonschema.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/shellcheck-py/shellcheck-py.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/pre-commit/sync-pre-commit-deps.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
trim trailing whitespace.................................................Passed
fix end of files.........................................................Passed
check yaml...............................................................Passed
check for added large files..............................................Passed
ruff check...............................................................Failed
- hook id: ruff-check
- exit code: 1

EXE001 Shebang is present but file is not executable
 --> scripts/cert-manager/create_cloudflare_secret.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Create Cloudflare API token secret for cert-manager if it doesn't exist.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/cert-manager/wait_for_cert_manager.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Wait for cert-manager deployment and CRDs to be ready."""
  |

EXE001 Shebang is present but file is not executable
 --> scripts/cert-manager/wait_for_wildcard_cert.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Wait for wildcard certificate secret to be ready."""
  |

EXE001 Shebang is present but file is not executable
 --> scripts/dns/delete_a_record.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Delete A Record Script for Cloudflare.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/dns/prune_dns_records.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """DNS Record Pruning Script for {DOMAIN_NAME}.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/dns/update_service_dns.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Service DNS Update Script for {DOMAIN_NAME}.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/freeipa/configure_freeipa.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Configure FreeIPA server settings after deployment.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/freeipa/create_users.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Create default users in FreeIPA after deployment.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/freeipa/init_freeipa.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Initialize FreeIPA server certificates and configuration.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/headscale/cleanup_headscale_nodes.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Cleanup offline Headscale nodes for given hostnames.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/headscale/create_headscale_user_and_key.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Create default Headscale user and API key, store in Kubernetes secret."""
  |

EXE001 Shebang is present but file is not executable
 --> scripts/headscale/get_headscale_api_key.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Get Headscale API key from Kubernetes secret.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/headscale/wait_for_headscale.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Wait for Headscale to be ready."""
  |

EXE001 Shebang is present but file is not executable
 --> scripts/redmine/backup_restore_db.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 |
3 | import argparse
  |

EXE001 Shebang is present but file is not executable
 --> scripts/redmine/configure_ldap.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Configure FreeIPA LDAP authentication in Redmine database.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/redmine/mirror_docs.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Redmine Documentation Mirror Script.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/redmine/test_connection.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Test Redmine API Connection.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/tailscale/clear_tailscale_state.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Tailscale Init Container Script
3 | Clears old Tailscale authentication and state before pod starts.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/tailscale/get_tailscale_key.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Get Tailscale pre-authentication key from Headscale.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/tailscale/init_tailscale.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Tailscale Init Container Script
3 | Runs before main containers to ensure clean Tailscale setup and DNS updates.
  |

EXE001 Shebang is present but file is not executable
 --> scripts/tailscale/tailscale_entrypoint.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Tailscale Sidecar Entrypoint Wrapper
3 | This script wraps the Tailscale daemon to:
  |

EXE001 Shebang is present but file is not executable
 --> scripts/terraform/fix_zero_indexing.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Fix [0] indexing in depends_on blocks across all Terraform files.
  |

EXE001 Shebang is present but file is not executable
 --> tests/test_cleanup_headscale_nodes.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Tests for cleanup_headscale_nodes.py.
  |

EXE001 Shebang is present but file is not executable
 --> tests/test_configure_ldap.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Tests for configure_ldap.py.
  |

EXE001 Shebang is present but file is not executable
 --> tests/test_create_cloudflare_secret.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Tests for create_cloudflare_secret.py.
  |

EXE001 Shebang is present but file is not executable
 --> tests/test_create_users.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Tests for create_users.py.
  |

EXE001 Shebang is present but file is not executable
 --> tests/test_get_tailscale_key.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Tests for get_tailscale_key.py."""
  |

EXE001 Shebang is present but file is not executable
 --> tests/test_update_service_dns.py:1:1
  |
1 | #!/usr/bin/env python3
  | ^^^^^^^^^^^^^^^^^^^^^^
2 | """Tests for update_service_dns.py.
  |

Found 28 errors.

ruff format..............................................................Passed
flake8...................................................................Passed
mypy.....................................................................Passed
pyupgrade................................................................Passed
Checkov..................................................................Failed
- hook id: checkov
- exit code: 1

Traceback (most recent call last):
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/bin/checkov", line 2, in <module>
    from checkov.main import Checkov
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/checkov/main.py", line 22, in <module>
    from checkov.ansible.runner import Runner as ansible_runner
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/checkov/ansible/runner.py", line 5, in <module>
    from checkov.common.graph.checks_infra.registry import BaseRegistry
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/checkov/common/graph/checks_infra/registry.py", line 6, in <module>
    from checkov.common.graph.checks_infra import debug
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/checkov/common/graph/checks_infra/debug.py", line 13, in <module>
    from checkov.common.util.env_vars_config import env_vars_config
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/checkov/common/util/env_vars_config.py", line 7, in <module>
    from checkov.common.util.http_utils import normalize_bc_url
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/checkov/common/util/http_utils.py", line 11, in <module>
    import aiohttp
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/aiohttp/__init__.py", line 6, in <module>
    from .client import (
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/aiohttp/client.py", line 87, in <module>
    from .connector import (
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/aiohttp/connector.py", line 64, in <module>
    from .resolver import DefaultResolver
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/aiohttp/resolver.py", line 12, in <module>
    import aiodns
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/aiodns/__init__.py", line 60, in <module>
    class DNSResolver:
  File "/home/runner/.cache/pre-commit/repofhb1o503/py_env-python3.11/lib/python3.11/site-packages/aiodns/__init__.py", line 162, in DNSResolver
    ) -> asyncio.Future[list[pycares.ares_query_a_result]]: ...
                             ^^^^^^^^^^^^^^^^^^^^^^^^^^^
AttributeError: module 'pycares' has no attribute 'ares_query_a_result'

Validate GitHub Workflows................................................Passed
shellcheck...............................................................Passed
sync-pre-commit-deps.....................................................Passed
Error: Process completed with exit code 1.