12 lines
409 B
Plaintext
12 lines
409 B
Plaintext
|
pnpm exec lint-staged
|
||
|
|
# Verify no .env files staged
|
||
|
|
if git diff --cached --name-only | grep -qE '\.env($|\.)'; then
|
||
|
|
echo "❌ .env files must not be committed"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
# Scan for potential secrets
|
||
|
|
if git diff --cached -U0 | grep -qiE '(password|secret|api_key|access_key)\s*[:=]\s*["\x27][A-Za-z0-9+/=]{16,}'; then
|
||
|
|
echo "⚠️ Possible hardcoded secret detected. Review staged changes."
|
||
|
|
exit 1
|
||
|
|
fi
|