71 lines
2.0 KiB
YAML
71 lines
2.0 KiB
YAML
# Pre-commit Framework Configuration for Gitleaks
|
|
# Install pre-commit: pip install pre-commit
|
|
# Install hooks: pre-commit install
|
|
# Run manually: pre-commit run --all-files
|
|
#
|
|
# More info: https://pre-commit.com/
|
|
|
|
repos:
|
|
- repo: https://github.com/gitleaks/gitleaks
|
|
rev: v8.18.0 # Update to latest version: https://github.com/gitleaks/gitleaks/releases
|
|
hooks:
|
|
- id: gitleaks
|
|
name: Gitleaks - Secret Detection
|
|
description: Scan staged changes for hardcoded secrets
|
|
entry: gitleaks protect --verbose --redact --staged
|
|
language: system
|
|
pass_filenames: false
|
|
# Optional: Custom configuration
|
|
# args: ['--config', '.gitleaks.toml']
|
|
|
|
# Optional: Additional security hooks
|
|
|
|
# Detect private keys
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v4.5.0
|
|
hooks:
|
|
- id: detect-private-key
|
|
name: Detect Private Keys
|
|
|
|
# Check for AWS credentials
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v4.5.0
|
|
hooks:
|
|
- id: detect-aws-credentials
|
|
name: Detect AWS Credentials
|
|
args: ['--allow-missing-credentials']
|
|
|
|
# Prevent large files (may contain secrets)
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v4.5.0
|
|
hooks:
|
|
- id: check-added-large-files
|
|
name: Check for Large Files
|
|
args: ['--maxkb=1000']
|
|
|
|
# Check for merge conflicts
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v4.5.0
|
|
hooks:
|
|
- id: check-merge-conflict
|
|
name: Check for Merge Conflicts
|
|
|
|
# Ensure files end with newline
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v4.5.0
|
|
hooks:
|
|
- id: end-of-file-fixer
|
|
name: Fix End of Files
|
|
|
|
# Trim trailing whitespace
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v4.5.0
|
|
hooks:
|
|
- id: trailing-whitespace
|
|
name: Trim Trailing Whitespace
|
|
|
|
# Configuration for pre-commit.ci (optional CI service)
|
|
ci:
|
|
autofix_prs: false
|
|
autoupdate_schedule: monthly
|