ilia/AtAnyRate
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: add local pre-commit gitleaks hook #4

Merged
ilia merged 3 commits from ci/bootstrap-pre-commit-gitleaks-hook into main 2026-07-13 14:44:14 -05:00
Conversation 0 Commits 3 Files Changed 3
+101
ilia commented 2026-07-12 16:21:20 -05:00
Owner
Copy Link
Copy Source

Summary

Add a local pre-commit gitleaks hook so secrets are caught before they leave your
machine, not just at CI time. Mirrors the secret-scanning CI job — same
.gitleaks.toml allowlist, same tool.

To activate (one-time, per clone)

bash scripts/git-hooks/install.sh

This copies scripts/git-hooks/pre-commit to .git/hooks/pre-commit. If gitleaks
isn't installed locally the hook no-ops with a warning (CI still catches it either way).

Test plan

  • Merge, then run the installer once locally
  • Confirm git commit with a fake secret in a staged file is blocked
## Summary Add a local **pre-commit** gitleaks hook so secrets are caught before they leave your machine, not just at CI time. Mirrors the `secret-scanning` CI job — same `.gitleaks.toml` allowlist, same tool. ## To activate (one-time, per clone) ```bash bash scripts/git-hooks/install.sh ``` This copies `scripts/git-hooks/pre-commit` to `.git/hooks/pre-commit`. If `gitleaks` isn't installed locally the hook no-ops with a warning (CI still catches it either way). ## Test plan - [ ] Merge, then run the installer once locally - [ ] Confirm `git commit` with a fake secret in a staged file is blocked
ilia added 3 commits 2026-07-12 16:21:20 -05:00
ci: add local pre-commit gitleaks hook 084e4541b7
ci: add local pre-commit gitleaks hook de47fe1e3b
ci: add homelab gitleaks allowlist
CI / skip-ci-check (pull_request) Successful in 11s
Details
CI / secret-scan (pull_request) Successful in 8s
Details
CI / python-ci (pull_request) Successful in 50s
Details
ae722b91e1
ilia added 1 commit 2026-07-12 16:21:20 -05:00
ci: add homelab gitleaks allowlist
CI / skip-ci-check (pull_request) Successful in 11s
Details
CI / secret-scan (pull_request) Successful in 8s
Details
CI / python-ci (pull_request) Successful in 50s
Details
ae722b91e1
ilia merged commit d640285b93 into main 2026-07-13 14:44:14 -05:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
ilia (Ilia)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: ilia/AtAnyRate#4