Add pre-commit config

.clang-format

@@ -1,48 +1,4 @@
 BasedOnStyle: Google
-AccessModifierOffset: -2
-AllowAllParametersOfDeclarationOnNextLine: false
-AllowShortBlocksOnASingleLine: Empty
-AllowShortCaseLabelsOnASingleLine: false
-AllowShortEnumsOnASingleLine: false
-# Empty is required in AllowShortFunctionsOnASingleLine over Inline because Inline contradicts with AUTOSAR rule A7-1-7
-# Such rule is no longer existing in MISRA C++:2023, once we are fully migrated to MISRA C++:2023, switching to Inline
-# could be reconsidered
-AllowShortFunctionsOnASingleLine: Empty
-AllowShortIfStatementsOnASingleLine: Never
-AllowShortLambdasOnASingleLine: Empty
-AllowShortLoopsOnASingleLine: false
-BinPackArguments: false
-BinPackParameters: false
-BraceWrapping:
-  AfterCaseLabel: true
-  AfterClass: true
-  AfterControlStatement: Always
-  AfterEnum: true
-  AfterFunction: true
-  AfterNamespace: true
-  AfterObjCDeclaration: true
-  AfterStruct: true
-  AfterUnion: true
-  BeforeCatch: true
-  BeforeElse: true
-  IndentBraces: false
-BreakBeforeBraces: Custom
 ColumnLimit: 120
-DerivePointerAlignment: false
-IncludeBlocks: Preserve
-IncludeCategories:
-  - Regex: '^(<|")(assert|complex|ctype|errno|fenv|float|inttypes|iso646|limits|locale|math|setjmp|signal|stdalign|stdargh|stdatomic|stdbool|stddef|stdint|stdio|stdlib|stdnoreturn|string|tgmath|threads|time|uchar|wchar|wctype)\.h(>|")$'
-    Priority: 2
-  - Regex: '^(<|")(cstdlib|csignal|csetjmp|cstdarg|typeinfo|typeindex|type_traits|bitset|functional|utility|ctime|chrono|cstddef|initializer_list|tuple|any|optional|variant|new|memory|scoped_allocator|memory_resource|climits|cfloat|cstdint|cinttypes|limits|exception|stdexcept|cassert|system_error|cerrno|cctype|cwctype|cstring|cwchar|cuchar|string|string_view|array|vector|deque|list|forward_list|set|map|unordered_set|unordered_map|stack|queue|algorithm|execution|teratorslibrary|iterator|cmath|complex|valarray|random|numeric|ratio|cfenv|iosfwd|ios|istream|ostream|iostream|fstream|sstream|strstream|iomanip|streambuf|cstdio|locale|clocale|codecvt|regex|atomic|thread|mutex|shared_mutex|future|condition_variable|filesystem|ciso646|ccomplex|ctgmath|cstdalign|cstdbool)(>|")$'
-    Priority: 3
-  - Regex: '^(<|").*(>|")$'
-    Priority: 1
 IndentWidth: 4
-InsertNewlineAtEOF: true
-KeepEmptyLinesAtTheStartOfBlocks: true
-QualifierAlignment: Left
-CommentPragmas: '^.*A2Lfactory:'
 ---
-# Make sure language specific settings are below the generic settings to be compatible to all languages.
-Language: Cpp
-Standard: c++17

.clang-tidy

@@ -0,0 +1,2 @@
+Checks: ' -*, bugprone-*, cert-*, clang-analyzer-core.*, clang-analyzer-cplusplus.*, clang-analyzer-security.*, cppcoreguidelines-pro-bounds-pointer-arithmetic, cppcoreguidelines-pro-type-cstyle-cast, hicpp-* '
+WarningsAsErrors: 'bugprone-*,cert-*,clang-analyzer-*,hicpp-*'

.github/workflows/format.yml

@@ -1,5 +1,5 @@
 # *******************************************************************************
-# Copyright (c) 2025 Contributors to the Eclipse Foundation
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
 #
 # See the NOTICE file(s) distributed with this work for additional
 # information regarding copyright ownership.
@@ -12,16 +12,14 @@
 # *******************************************************************************
 
 name: Formatting checks
-
+permissions:
+  contents: read
+  actions: write
 on:
   pull_request:
     types: [opened, reopened, synchronize]
   merge_group:
     types: [checks_requested]
-env:
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 jobs:
   formatting-check:
-    uses: eclipse-score/cicd-workflows/.github/workflows/format.yml@c1c90b1a82a1fab0fc202979dde6686b2162d5a8 # v0.0.0
-    with:
-      bazel-target: "test --lockfile_mode=error //:format.check" # optional, this is the default
+    uses: eclipse-score/cicd-workflows/.github/workflows/format.yml@f57b605a284ca117bcfd9f83ea427096faaac7d1

.pre-commit-config.yaml

@@ -0,0 +1,58 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+
+repos:
+  - repo: local
+    hooks:
+      - id: copyright-fix
+        name: //:copyright-fix
+        entry: bazel run //:copyright-fix
+        language: system
+        pass_filenames: false
+      - id: format-fix
+        name: //:format.fix
+        entry: bazel run //:format.fix
+        language: system
+        files: (BUILD|BUILD\.bazel|WORKSPACE|\.bazelrc|[^/]+\.(py|bzl|bazel|yaml|yml|rs))$
+        pass_filenames: false
+  - repo: https://github.com/pocc/pre-commit-hooks
+    rev: v1.3.5
+    hooks:
+      - id: clang-format
+        name: clang-format
+        entry: ./scripts/run_clang_format_precommit.sh
+        language: system
+        files: '\.(c|cc|cpp|h|hpp)$'
+        # all relevant files are currently excluded the format is not 
+        # clarified yet, so we don't want to run clang-format on any files
+        exclude: |
+          (?x)^(
+            examples/|
+            tests/|
+            score/
+          )
+      - id: clang-tidy
+        name: clang-tidy
+        # Run through a wrapper that sanitizes unsupported linker flags in
+        # compile_commands.json before invoking clang-tidy.
+        entry: python3 ./scripts/run_clang_tidy_precommit.py
+        language: system
+        files: '\.(c|cc|cpp|h|hpp)$'
+        # all relevant files are currently excluded the checks are
+        # not clarified yet, so we don't want to run clang-tidy on any files
+        exclude: |
+          (?x)^(
+            examples/|
+            tests/|
+            score/
+          )

.vscode/tasks.json

@@ -5,7 +5,7 @@
             "label": "Refresh compile_commands.json",
             "type": "shell",
             "isBackground": true,
-            "command": "bazel run @hedron_compile_commands//:refresh_all",
+            "command": "bazel run //:generate_compile_commands -- --config=x86_64-linux",
             "problemMatcher": [],
             "group": {
                 "kind": "build",

BUILD

@@ -11,11 +11,55 @@
 # SPDX-License-Identifier: Apache-2.0
 # *******************************************************************************
 
+load("@hedron_compile_commands//:refresh_compile_commands.bzl", "refresh_compile_commands")
 load("@rules_python//python:pip.bzl", "compile_pip_requirements")
+load("@score_bazel_tools_cc//quality:defs.bzl", "clang_format_config", "quality_clang_tidy_config")
 load("@score_docs_as_code//:docs.bzl", "docs")
 load("@score_tooling//:defs.bzl", "copyright_checker", "dash_license_checker", "rust_coverage_report", "setup_starpls", "use_format_targets")
 load("//:project_config.bzl", "PROJECT_CONFIG")
 
+# Generate `compile_commands.json`.
+# Required for `clangd` support.
+refresh_compile_commands(
+    name = "generate_compile_commands",
+    exclude_external_sources = True,
+    target_compatible_with = ["@platforms//os:linux"],
+    targets = {
+        "//...": "",
+    },
+)
+
+quality_clang_tidy_config(
+    name = "clang_tidy_config",
+    additional_flags = [],
+    clang_tidy_binary = "@llvm_toolchain//:clang-tidy",
+    default_feature = "strict",
+    dependency_attributes = [
+        "deps",
+        "srcs",
+    ],
+    excludes = ["external/"],
+    feature_mapping = {
+        "//:.clang-tidy": "strict",
+    },
+    target_types = [
+        "cc_library",
+    ],
+    unsupported_flags = [],
+    visibility = ["//visibility:public"],
+)
+
+clang_format_config(
+    name = "clang_format_config",
+    config_file = "//:.clang_format",
+    excludes = ["external/"],
+    target_types = [
+        "cc_binary",
+        "cc_library",
+    ],
+    visibility = ["//visibility:public"],
+)
+
 # In order to update the requirements, change the `requirements.in` file and run:
 # `bazel run //:requirements.update`.
 # This will update the `requirements_lock.txt` file.
@@ -45,12 +89,34 @@ setup_starpls(
 copyright_checker(
     name = "copyright",
     srcs = [
+        ".github",
+        "docs",
         "examples",
+        "externals",
         "score",
+        "scripts",
+        "tests",
         "//:BUILD",
         "//:MODULE.bazel",
     ],
     config = "@score_tooling//cr_checker/resources:config",
+    exclusion = "//:cr_checker_exclusion",
+    extensions = [
+        "bazel",
+        "BUILD",
+        "bzl",
+        "c",
+        "cpp",
+        "h",
+        "hpp",
+        "ini",
+        "py",
+        "rs",
+        "rst",
+        "sh",
+        "yaml",
+        "yml",
+    ],
     template = "@score_tooling//cr_checker/resources:templates",
     visibility = ["//visibility:public"],
 )

MODULE.bazel

@@ -22,6 +22,7 @@ bazel_dep(name = "rules_python", version = "1.8.5")
 bazel_dep(name = "rules_rust", version = "0.68.2-score")
 bazel_dep(name = "rules_cc", version = "0.2.17")
 bazel_dep(name = "rules_oci", version = "2.3.0")
+bazel_dep(name = "rules_shell", version = "0.6.1")
 bazel_dep(name = "aspect_rules_lint", version = "2.3.0")
 bazel_dep(name = "buildifier_prebuilt", version = "8.5.1")
 bazel_dep(name = "platforms", version = "1.0.0")
@@ -39,6 +40,20 @@ bazel_dep(name = "score_rust_policies", version = "0.0.5", dev_dependency = True
 bazel_dep(name = "score_cpp_policies", version = "0.0.1", dev_dependency = True)
 bazel_dep(name = "score_process", version = "1.6.0", dev_dependency = True)
 bazel_dep(name = "score_platform", version = "0.6.0", dev_dependency = True)
+bazel_dep(name = "score_bazel_tools_cc", version = "0.1.0", dev_dependency = True)
+single_version_override(
+    module_name = "score_bazel_tools_cc",
+    patch_strip = 0,
+    patches = ["//patches:score_bazel_tools.patch"],
+    version = "0.1.0",
+)
+
+single_version_override(
+    module_name = "score_bazel_tools_python",
+    patch_strip = 0,
+    patches = ["//patches:score_bazel_tools_python.patch"],
+    version = "0.1.3",
+)
 
 ## Configure the C++ toolchain
 bazel_dep(name = "score_bazel_cpp_toolchains", version = "0.5.4", dev_dependency = True)
@@ -84,6 +99,18 @@ use_repo(
     "score_qcc_x86_64_toolchain_pkg",
 )
 
+# LLVM toolchain.
+bazel_dep(name = "toolchains_llvm", version = "1.4.0")
+
+llvm = use_extension("@toolchains_llvm//toolchain/extensions:llvm.bzl", "llvm")
+llvm.toolchain(
+    llvm_version = "15.0.2",
+    stdlib = {"linux-x86_64": "stdc++"},
+)
+use_repo(llvm, "llvm_toolchain")
+
+register_toolchains("@llvm_toolchain//:all")
+
 # UTs on QNX
 bazel_dep(name = "score_qnx_unit_tests", version = "0.2.0", dev_dependency = True)
 bazel_dep(name = "score_rules_imagefs", version = "0.0.3", dev_dependency = True)
@@ -165,8 +192,9 @@ bazel_dep(name = "score_baselibs", version = "0.2.9")
 bazel_dep(name = "hedron_compile_commands", dev_dependency = True)
 git_override(
     module_name = "hedron_compile_commands",
-    commit = "0e990032f3c5a866e72615cf67e5ce22186dcb97",
+    commit = "abb61a688167623088f8768cc9264798df6a9d10",
+    patch_strip = 1,
+    # Patch for support for Bazel 8.6.0.
+    patches = ["//patches:hedron_compile_commands_env_vars.patch"],
     remote = "https://github.com/hedronvision/bazel-compile-commands-extractor.git",
-    # Replace the commit hash (above) with the latest (https://github.com/hedronvision/bazel-compile-commands-extractor/commits/main).
-    # Even better, set up Renovate and let it do the work for you (see "Suggestion: Updates" in the README).
 )