From 1e423956be8d1bbca86ed2bb3ec08b82053653ce Mon Sep 17 00:00:00 2001 From: Mannu Date: Sat, 15 Aug 2026 08:59:55 +0530 Subject: [PATCH] fix(hooks): use 'gitleaks git --staged' (v8.30 syntax) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 'gitleaks protect' is the deprecated alias. Both work today, but the deprecated form will eventually be removed and the failure mode is a silently non-functioning secret gate — worse than no gate, because it is trusted. Verified end-to-end: staging a file containing a Supabase service-role JWT and a GitHub PAT causes the pre-commit hook to exit 1 and block the commit. Refs C-03 --- lefthook.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lefthook.yml b/lefthook.yml index 72c1533..be63c52 100644 --- a/lefthook.yml +++ b/lefthook.yml @@ -3,7 +3,7 @@ pre-commit: parallel: true commands: gitleaks: - run: gitleaks protect --staged --no-banner --redact + run: gitleaks git --staged --no-banner --redact no-large-files: run: | git diff --cached --name-only --diff-filter=A | while read -r f; do