Skip to content

Mise Tooling & Task Architecture

This repository uses mise (formerly rtx) as its single source of truth for tool versions, environment isolation, and task execution.

🛠️ Tooling Configuration (mise.toml)

All developer CLI dependencies are declared in mise.toml and installed automatically on mise install or task execution.

Tool Source / Provider Description
python Native (3.14) Primary Python runtime environment.
uv Native Fast Python package installer and virtual environment manager.
trivy Native Security vulnerability scanner for containers and file trees.
yamllint pipx:yamllint Linter for YAML files.
zizmor pipx:zizmor Static analysis security auditor for GitHub Actions workflows.
actions-up npm:actions-up CLI tool for auditing and bumping GitHub Actions commit SHAs.
pre-commit Native Multi-language pre-commit hook manager.

🚀 Available Tasks

Execute tasks using mise run <task>:

# Initialize dependencies
mise run init

# Build Zensical documentation
mise run docs

# Security scanning
mise run scan

# Quality and linting
mise run lint
mise run format
mise run check

# Action maintenance
mise run bump

Task Reference Table

Task Name Command Executed Description
init uv sync --all-extras --all-groups Synchronizes Python dependencies into local .venv.
docs uv run zensical build Generates the Zensical / MkDocs static documentation site.
scan trivy fs ... & zizmor . Runs filesystem vulnerability scanning (Trivy) and Actions security audits (Zizmor).
lint yamllint . Audits YAML files across the repository against .yamllint.yaml.
format uv run ruff format . Formats Python scripts using Ruff.
bump actions-up Audits and updates GitHub Action version references to full 40-character SHAs.
check yamllint . Validates repository configuration and YAML syntax.

🔒 Pre-Commit Hook Integration

Local pre-commit hooks enforce these tasks before every commit:

repos:
  - repo: https://github.com/jdx/mise-pre-commit
    rev: v2024.11.0
    hooks:
      - id: mise-tasks