chore(ci): enforce conventional commit policy in local and ci checks

Author: syscod3

.github/workflows/ci.yml

@@ -43,6 +43,22 @@ jobs:
       - name: Scan repository for secrets (gitleaks)
         run: gitleaks git --redact --verbose
 
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.x"
+
+      - name: Commit message convention check
+        run: |
+          python -m pip install --upgrade pip commitizen
+          if [ "${{ github.event_name }}" = "pull_request" ]; then
+            RANGE="${{ github.event.pull_request.base.sha }}..${{ github.event.pull_request.head.sha }}"
+          else
+            RANGE="${{ github.event.before }}..${{ github.sha }}"
+          fi
+          echo "Checking commit messages in range: ${RANGE}"
+          cz check --rev-range "${RANGE}"
+
   build:
     name: Build Binaries (${{ matrix.arch }})
     runs-on: ubuntu-latest

.github/workflows/lint.yml

@@ -17,6 +17,22 @@ jobs:
         with:
           go-version-file: go.mod
 
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.x"
+
+      - name: Commit message convention check
+        run: |
+          python -m pip install --upgrade pip commitizen
+          if [ "${{ github.event_name }}" = "pull_request" ]; then
+            RANGE="${{ github.event.pull_request.base.sha }}..${{ github.event.pull_request.head.sha }}"
+          else
+            RANGE="${{ github.event.before }}..${{ github.sha }}"
+          fi
+          echo "Checking commit messages in range: ${RANGE}"
+          cz check --rev-range "${RANGE}"
+
       - name: Check linter configuration
         run: make lint-config
       - name: Run linter

.pre-commit-config.yaml

@@ -23,3 +23,9 @@ repos:
         language: system
         types: [go]
         pass_filenames: false
+
+  - repo: https://github.com/commitizen-tools/commitizen
+    rev: v4.13.9
+    hooks:
+      - id: commitizen
+        stages: [commit-msg]

docs/plans/2026-03-08-quality-gates-commit-policy.md

@@ -0,0 +1,22 @@
+# Quality Gates and Commit Policy
+
+## Mandatory checks
+
+- Local: run `pre-commit` and enforce Conventional Commits at `commit-msg` stage.
+- CI: enforce commit-message convention in lint workflows for push and pull_request.
+
+## Local setup
+
+```bash
+pre-commit install
+pre-commit install --hook-type commit-msg
+```
+
+## Commit message format
+
+Use Conventional Commits:
+
+- `feat: ...`
+- `fix: ...`
+- `chore(ci): ...`
+- `docs: ...`