devtools: Add shellcheck to pre-commit.
What changed, and why it matters
This commit adds a development tool called shellcheck to the project's pre-commit checks. It is purely a code-quality and linting change; it does not modify any runtime code, fix a bug, or change how the software behaves. There is no security issue in this commit itself.
No security action required. This is a normal development tooling change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates .pre-commit-config.yaml to add the shellcheck-py hook (v0.11.0.1) with -fgcc output formatting. This is a static-analysis/linting addition for shell scripts. It does not alter Core Lightning’s source code, build artifacts, or runtime behavior, and it does not patch any vulnerability.
Changed components
.pre-commit-config.yamlInspect captured patch +6 / −0
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index fe1a13e4..7c8e13d8 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -11,3 +11,9 @@ repos:
- id: ruff-format
args: [ --diff ]
exclude: "contrib/pyln-grpc-proto/pyln/grpc/(primitives|node)_pb2(|_grpc).py"
+
+- repo: https://github.com/shellcheck-py/shellcheck-py
+ rev: v0.11.0.1
+ hooks:
+ - id: shellcheck
+ args: [ -fgcc ]
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.