tangled
alpha
login
or
join now
anglepoised.com
/
dotfiles
0
fork
atom
this repo has no description
0
fork
atom
overview
issues
pulls
pipelines
feat(gitleaks): initial commit
anglepoised.com
2 months ago
92b1e00a
2983beaa
+17
4 changed files
expand all
collapse all
unified
split
docs
README.md
home
dot_config
homebrew
Brewfile
private_git
config
hooks
executable_pre-commit
+5
docs/README.md
reviewed
···
9
9
```sh
10
10
brew bundle dump --file ~/.config/homebrew/Brewfile --force --no-vscode
11
11
```
12
12
+
13
13
+
### Git secret scanning
14
14
+
15
15
+
This repo configures a global `pre-commit` hook (via `core.hooksPath`) that
16
16
+
uses `gitleaks` to block secrets from being committed.
+1
home/dot_config/homebrew/Brewfile
reviewed
···
5
5
brew "gh"
6
6
brew "git"
7
7
brew "git-lfs"
8
8
+
brew "gitleaks"
8
9
brew "gnupg"
9
10
brew "micro"
10
11
brew "mise"
+1
home/dot_config/private_git/config
reviewed
···
3
3
[core]
4
4
autocrlf = input
5
5
excludesfile = ~/.config/git/ignore
6
6
+
hooksPath = ~/.config/git/hooks
6
7
[credential]
7
8
helper = osxkeychain
8
9
[user]
+10
home/dot_config/private_git/hooks/executable_pre-commit
reviewed
···
1
1
+
#!/usr/bin/env sh
2
2
+
set -eu
3
3
+
4
4
+
if ! command -v gitleaks >/dev/null 2>&1; then
5
5
+
echo "gitleaks not installed; install it to enable secret scanning." >&2
6
6
+
echo "macOS: brew install gitleaks" >&2
7
7
+
exit 1
8
8
+
fi
9
9
+
10
10
+
gitleaks protect --staged --redact --no-banner