[StepSecurity] Apply security best practices

.coveragerc

@@ -8,4 +8,4 @@ omit =
 [report]
 exclude_lines =
     pragma: no cover
-    if TYPE_CHECKING:
+    if TYPE_CHECKING:

.gitignore

@@ -28,4 +28,4 @@ test.py
 # rust so
 *.cpython*.so
 
-.codspeed
+.codspeed

.pre-commit-config.yaml

@@ -43,6 +43,8 @@ repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v5.0.0
     hooks:
+      - id: end-of-file-fixer
+      - id: trailing-whitespace
       - id: check-executables-have-shebangs
       - id: check-merge-conflict
       - id: detect-private-key
@@ -123,3 +125,11 @@ repos:
         entry: scripts/check_getLogger.sh
         language: script
         require_serial: true
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.16.3
+    hooks:
+      - id: gitleaks
+  - repo: https://github.com/jumanjihouse/pre-commit-hooks
+    rev: 3.0.0
+    hooks:
+      - id: shellcheck

.python-version

@@ -1 +1 @@
-3.13
+3.13

ci/Dockerfile.alpine

@@ -20,4 +20,4 @@ RUN \
 COPY requirements-test.txt /requirements-test.txt
 
 RUN \
-    uv pip install --index-strategy unsafe-best-match -r /requirements-test.txt
+    uv pip install --index-strategy unsafe-best-match -r /requirements-test.txt

ci/entrypoint.sh

@@ -8,4 +8,4 @@ rm -rf deebot_client
 
 uv pip install --no-progress --system --force-reinstall dist/deebot_client-*.whl
 # Disable tests, which require docker for now
-pytest tests -v -m "not docker"
+pytest tests -v -m "not docker"

mypy.ini

@@ -24,4 +24,4 @@ ignore_missing_imports = True
 ignore_missing_imports = True
 
 [mypy-testfixtures.*]
-ignore_missing_imports = True
+ignore_missing_imports = True

pytest.ini

@@ -4,4 +4,4 @@ markers =
     docker: marks tests, which require docker (deselect with '-m "not docker"')
 #timeout = 10
 #log_cli=true
-#log_level=DEBUG
+#log_level=DEBUG

scripts/check_getLogger.sh

@@ -15,4 +15,4 @@ for FILE in `find deebot_client/ -name "*.py"` ; do
       exit 1
     fi
       done
-exit
+exit

scripts/setup.sh

@@ -13,4 +13,4 @@ uv sync --frozen --group dev
 python -m maturin_import_hook site install
 
 # Setup pre-commit
-pre-commit install
+pre-commit install