the-custodian/docs/changes/CUST-WP-0080/secret-hooks-prior-hook-1
codex 355b6b9720
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
Python Tests / pytest (push) Successful in 25s
security: verify staged-secret enforcement across 22 workstation checkouts
2026-10-12 17:48:43 +02:00

5 lines
223 B
Bash

#!/bin/sh
# Install as .git/hooks/pre-commit; rejects generated/evidence-only auto commits too.
set -eu
REPO_ROOT="$(git rev-parse --show-toplevel)"
exec python3 "$REPO_ROOT/scripts/check_generated_only_commit.py" --staged