🚀 feat(inspect): Geti Inspect

.gitattributes

@@ -5,4 +5,3 @@
 # Ignore *ipynb files to detect the language.
 # This is because GitHub misdetects the repo language when ipynb files are included.
 *.ipynb filter=lfs diff=lfs merge=lfs -text
-uv.lock filter=lfs diff=lfs merge=lfs -text

.github/workflows/_reusable-code-quality.yaml

@@ -1,25 +1,26 @@
 # Code Quality Workflow
 #
-# This reusable workflow executes code quality checks using pre-commit hooks
-# and other quality assurance tools across multiple languages.
+# This reusable workflow executes code quality checks using prek (prek workspace tool)
+# with support for monorepo configurations and multiple prek configs.
 #
 # Key Features:
-# - Pre-commit hook execution
-# - Multi-language support
+# - Workspace mode support (multiple .pre-commit-config.yaml files)
+# - Multi-language support (Python, Node.js, etc.)
+# - Automatic environment management
 # - Dependency caching
-# - Configurable environments
 # - Parallel check execution
 #
 # Process Stages:
-# 1. Environment Preparation:
-#    - Python setup
-#    - Cache configuration
+# 1. Checkout:
+#    - Full repository history
+#    - LFS file support
 #
-# 2. Quality Checks:
+# 2. Quality Checks (via prek):
 #    - Code linting
 #    - Style verification
 #    - Type checking
 #    - Best practices validation
+#    - Runs appropriate hooks based on file location
 #
 # 3. Results Processing:
 #    - Error reporting
@@ -42,7 +43,8 @@
 #        with:
 #          python-version: "3.11"
 #
-# Note: Requires configured pre-commit hooks in repository
+# Note: Uses prek-action (https://github.com/j178/prek-action) which supports
+# multiple pre-commit configs in workspace mode for monorepo setups
 
 name: Reusable Code Quality
 
@@ -58,15 +60,13 @@ permissions:
   contents: read
 
 jobs:
-  pre-commit:
+  prek:
     runs-on: ubuntu-latest
-    timeout-minutes: 5
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           fetch-depth: 0
           lfs: true
           persist-credentials: false
-      - uses: ./.github/actions/code-quality/pre-commit
-        with:
-          python-version: ${{ inputs.python-version }}
+      - uses: j178/prek-action@ef075ff6f80a73aeb8facb7dd22f66f344b1d17a # v1

.github/workflows/codeql.yml

@@ -19,7 +19,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       security-events: write # required to publish sarif
-
     strategy:
       fail-fast: false
       matrix:
@@ -28,27 +27,34 @@ jobs:
             build-mode: none
           - language: python
             build-mode: none
-
+          - language: javascript-typescript
+            build-mode: none
+    # FIXME: do not run for javascript-typescript, unless on push and PR for geti-inspect feature branch
+    # This prevents JavaScript/TypeScript CodeQL analysis (job failure) on unrelated branches
     steps:
       - name: Harden the runner (audit all outbound calls)
+        if: matrix.language != 'javascript-typescript' || (github.event_name != 'schedule' && (contains(github.ref, 'feature/geti-inspect') || contains(github.base_ref, 'feature/geti-inspect')))
         uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
         with:
           egress-policy: audit
 
       - name: Checkout repository
+        if: matrix.language != 'javascript-typescript' || (github.event_name != 'schedule' && (contains(github.ref, 'feature/geti-inspect') || contains(github.base_ref, 'feature/geti-inspect')))
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
+        if: matrix.language != 'javascript-typescript' || (github.event_name != 'schedule' && (contains(github.ref, 'feature/geti-inspect') || contains(github.base_ref, 'feature/geti-inspect')))
         uses: github/codeql-action/init@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
           queries: security-extended
 
       - name: Perform CodeQL Analysis
+        if: matrix.language != 'javascript-typescript' || (github.event_name != 'schedule' && (contains(github.ref, 'feature/geti-inspect') || contains(github.base_ref, 'feature/geti-inspect')))
         uses: github/codeql-action/analyze@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6
         with:
           category: "/language:${{matrix.language}}"