ci: add local pre-commit gitleaks hook #1

ilia · 2026-07-12T16:21:24-05:00

ilia commented

2026-07-12 16:21:24 -05:00

Summary

Add a local pre-commit gitleaks hook so secrets are caught before they leave your
machine, not just at CI time. Mirrors the secret-scanning CI job — same
.gitleaks.toml allowlist, same tool.

To activate (one-time, per clone)

bash scripts/git-hooks/install.sh

This copies scripts/git-hooks/pre-commit to .git/hooks/pre-commit. If gitleaks
isn't installed locally the hook no-ops with a warning (CI still catches it either way).

Test plan

Merge, then run the installer once locally
Confirm git commit with a fake secret in a staged file is blocked

## Summary Add a local **pre-commit** gitleaks hook so secrets are caught before they leave your machine, not just at CI time. Mirrors the `secret-scanning` CI job — same `.gitleaks.toml` allowlist, same tool. ## To activate (one-time, per clone) ```bash bash scripts/git-hooks/install.sh ``` This copies `scripts/git-hooks/pre-commit` to `.git/hooks/pre-commit`. If `gitleaks` isn't installed locally the hook no-ops with a warning (CI still catches it either way). ## Test plan - [ ] Merge, then run the installer once locally - [ ] Confirm `git commit` with a fake secret in a staged file is blocked

ilia added 3 commits 2026-07-12 16:21:24 -05:00

ci: add local pre-commit gitleaks hook 9f18f599b0

ci: add local pre-commit gitleaks hook b6d23a219d

ci: add homelab gitleaks allowlist e2bdb5f741

ilia added 1 commit 2026-07-12 16:21:24 -05:00

ci: add homelab gitleaks allowlist e2bdb5f741

ilia added 1 commit 2026-07-13 15:01:49 -05:00

ci: allowlist env.example fixture secrets 9e6e6f8bad

ilia merged commit 1aad2232bd into main

2026-07-13 15:04:38 -05:00

Sign in to join this conversation.