Add infra artifact secret-scan guardrail

2026-05-22 21:13:16 +00:00
parent c2c71cfe57
commit 0b528cbb5f
4 changed files with 134 additions and 0 deletions
--- a/.githooks/pre-commit
+++ b/.githooks/pre-commit
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+repo_root="$(git rev-parse --show-toplevel)"
+exec "$repo_root/scripts/scan-secret-bearing-artifacts.sh" --staged