manohar/3D_Cake_topper
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(hooks): use 'gitleaks git --staged' (v8.30 syntax)

Browse source 
'gitleaks protect' is the deprecated alias. Both work today, but the
deprecated form will eventually be removed and the failure mode is a
silently non-functioning secret gate — worse than no gate, because it
is trusted.

Verified end-to-end: staging a file containing a Supabase service-role
JWT and a GitHub PAT causes the pre-commit hook to exit 1 and block the
commit.

Refs C-03
This commit is contained in:
Manohar Gupta 2026-08-15 08:59:55 +05:30
parent c5ca1e0214
commit 1e423956be
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lefthook.yml
View file

@ -3,7 +3,7 @@ pre-commit:
parallel: true parallel: true
commands: commands:
gitleaks: gitleaks:
run: gitleaks protect --staged --no-banner --redact run: gitleaks git --staged --no-banner --redact
no-large-files: no-large-files:
run: | run: |
git diff --cached --name-only --diff-filter=A | while read -r f; do git diff --cached --name-only --diff-filter=A | while read -r f; do