ilia/talos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: add local pre-commit gitleaks hook #1

Merged
ilia merged 3 commits from ci/bootstrap-pre-commit-gitleaks-hook into main 2026-07-13 14:44:48 -05:00
Conversation 0 Commits 3 Files Changed 3 +101
ilia commented 2026-07-12 16:23:17 -05:00
Owner
Copy Link

Summary

Add a local pre-commit gitleaks hook so secrets are caught before they leave your
machine, not just at CI time. Mirrors the secret-scanning CI job — same
.gitleaks.toml allowlist, same tool.

To activate (one-time, per clone)

bash scripts/git-hooks/install.sh

This copies scripts/git-hooks/pre-commit to .git/hooks/pre-commit. If gitleaks
isn't installed locally the hook no-ops with a warning (CI still catches it either way).

Test plan

  • Merge, then run the installer once locally
  • Confirm git commit with a fake secret in a staged file is blocked
## Summary Add a local **pre-commit** gitleaks hook so secrets are caught before they leave your machine, not just at CI time. Mirrors the `secret-scanning` CI job — same `.gitleaks.toml` allowlist, same tool. ## To activate (one-time, per clone) ```bash bash scripts/git-hooks/install.sh ``` This copies `scripts/git-hooks/pre-commit` to `.git/hooks/pre-commit`. If `gitleaks` isn't installed locally the hook no-ops with a warning (CI still catches it either way). ## Test plan - [ ] Merge, then run the installer once locally - [ ] Confirm `git commit` with a fake secret in a staged file is blocked
ilia added 3 commits 2026-07-12 16:23:17 -05:00
ci: add homelab gitleaks allowlist
All checks were successful
CI / skip-ci-check (pull_request) Successful in 11s
Details
CI / secret-scan (pull_request) Successful in 8s
Details
CI / python-ci (pull_request) Successful in 23s
Details
a2fc5a650c
ilia merged commit a3b08c5b35 into main 2026-07-13 14:44:48 -05:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
ilia
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: ilia/talos#1
No description provided.
Delete Branch "ci/bootstrap-pre-commit-gitleaks-hook"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?