#!/usr/bin/env bash
# Block commits that add/modify any declared plaintext secret-bearing path.
set -euo pipefail
exec python3 scripts/check_secret_paths.py --staged