Class QualityGate

tools/quality_gate.py:187–394

Run fast repository quality checks.

class QualityGate:
    """Run fast repository quality checks."""

    def __init__(self, repo_root: Path | str, project_path: Path | str | None = None) -> None:
        self.repo_root = Path(repo_root).resolve()
        self.project_path = self._normalize_project_path(project_path)

    def _normalize_project_path(self, project_path: Path | str | None) -> Path | None:
        if project_path is None:
            return None
        raw_path = Path(project_path)
        full_path = raw_path if raw_path.is_absolute() else self.repo_root / raw_path
        try:
            relative_path = full_path.resolve().relative_to(self.repo_root)
        except ValueError as exc:
            raise ValueError(f"project path must be inside repo root: {project_path}") from exc
        return relative_path

    def run(self) -> list[Finding]:
        findings: list[Finding] = []
        findings.extend(self.check_tracked_ignored_files())
        findings.extend(self.check_secret_patterns())
        findings.extend(self.check_syntax())
        findings.extend(self.check_node_package_locks())
        return findings

    def git_files(self, *patterns: str) -> list[Path]:
        cmd = ["git", "ls-files", *patterns]
        result = subprocess.run(
            cmd,
            cwd=self.repo_root,
            check=True,
            capture_output=True,
            text=True,
        )
        paths = [Path(line) for line in result.stdout.splitlines() if line]
        if self.project_path is None:
            return paths
        return [path for path in paths if path == self.project_path or self.project_path in path.parents]

    def check_tracked_ignored_files(self) -> list[Finding]:
        result = subprocess.run(
            ["git", "ls-files", "-ci", "--exclude-standard"],
            cwd=self.repo_root,
            check=True,
            capture_output=True,
            text=True,
        )
        return [
            Finding(
                check="tracked-ignored",
                path=Path(path),
                message=(
                    "file is tracked by git but now matches .gitignore; "
                    "remove it from the index or adjust .gitignore"
                ),
            )
            for path in result.stdout.splitlines()