pre-commit test

.gitleaks.toml

@@ -0,0 +1,9 @@
+title = "Gitleaks development"
+[extend]
+useDefault = true
+
+[allowlist]
+paths = [
+  '''.env''',
+  '''.secrets.baseline'''
+]

.husky/pre-commit

@@ -2,13 +2,29 @@ git rm -r --cached build/ >/dev/null 2>&1 || true
 (while sleep 1; do printf '.'; done) &
 spinner_pid=$!
 
-echo "Scanning all commits... 30-60s 💅🥱⏳"
-# Run the gitleaks command
-gitleaks detect -v
+echo "Scanning commit... 30-60s 💅🥱⏳"
+
+# Exit on any error
+set -e
+
+# Ensure cleanup happens even if script fails
+cleanup() {
+    echo "Detected secrets in staged files!"
+    kill $spinner_pid
+}
+
+if ! gitleaks protect --staged -v --redact; then
+    cleanup
+    exit 1
+fi
+
+if ! git diff --staged --name-only -z | xargs -0 detect-secrets-hook --baseline .secrets.baseline; then
+    cleanup
+    exit 1
+fi
 
-# Once gitleaks completes, stop the animation
 kill $spinner_pid
-# wait $spinner_pid 2>/dev/null
+
 npm install
 npm run format
 npm run i18n:parse