43c8a57c26
- Install git-secrets with custom patterns for TPMJS, Neon, and AWS - Add secrets scan to lefthook pre-commit hook (blocks commits with secrets) - Create .gitsecrets file documenting secret patterns - Enhance .gitignore with comprehensive env file patterns - Add .env.example template for safe secret documentation
22 lines
614 B
YAML
22 lines
614 B
YAML
pre-commit:
|
|
parallel: true
|
|
commands:
|
|
secrets:
|
|
# Scan for secrets before allowing commit - runs first
|
|
priority: 1
|
|
run: git secrets --scan --cached
|
|
fail_text: "🚨 Secrets detected! Remove sensitive data before committing."
|
|
|
|
format:
|
|
glob: "*.{ts,tsx,js,jsx,json,md}"
|
|
run: pnpm biome check --write --no-errors-on-unmatched --files-ignore-unknown=true {staged_files}
|
|
stage_fixed: true
|
|
|
|
type-check:
|
|
# Only type-check packages with staged changes
|
|
run: pnpm turbo type-check --filter='...[HEAD]'
|
|
|
|
pre-push:
|
|
commands:
|
|
test:
|
|
run: pnpm test
|