How to use with docker?

[lifeforced]

I use lefthook for pre-commit checks. In it I have:

pre-commit:
  jobs:
    - name: zizmor
        glob: '.github/workflows/*.{yaml,yml}'
        run: |
          docker run --rm -v "${PWD}:/repo" -w /repo \
            ghcr.io/zizmorcore/zizmor:latest \
            {staged_files}

The docker container runs but it cannot find .github/workflows/xyz-workflow-file.yaml

My guess is the volume paths are incorrect, but I cannot find anything in the docs that specifies what is correct.

[woodruffw]

Someone else in the community may be able to help with your specific case, but in general I recommend using our official hook: https://github.com/zizmorcore/zizmor-pre-commit

[lifeforced]

Thanks. My goal is to use the zizmor container image since all team members have docker installed on their local machine and won't need to install the zizmor binary separately.

[lifeforced]

@woodruffw et. al. Regardless of any hook mechanism used, the question is more specifically about how to work with the docker run ... command for any kind of pre-commit hook config.

[woodruffw]

The specific volume paths are intentionally not documented, since they're not intended to be stable (the Docker image exists solely for consumption through zizmor-action). But if you want to use it knowing that there's no official stability policy, you can see an example here:

https://github.com/zizmorcore/zizmor-action/blob/dc57e305f08a25141d9b9f7c4ce7e4d72208d732/action.sh#L103-L112