Skip to content

chore: optional pre-commit hooks and secret check (#44) - #203

Merged
jsam merged 1 commit into
mainfrom
fm/il-f14
Oct 3, 2026
Merged

jsam merged 1 commit into
mainfrom
fm/il-f14

Conversation

@jsam

@jsam jsam commented Oct 3, 2026

Copy link
Copy Markdown
Contributor

Draft for visibility. Stacked on the release checkpoint 1 branch (fm/il-rc1); it will be retargeted to main once checkpoint 1 lands, and validated through the no-mistakes pipeline before merge.

Tracker: #199

`make install-hooks` points core.hooksPath at .githooks: pre-commit runs
`make fmt-check` when Rust is staged and a staged gitleaks scan, pre-push
runs `make lint`. Hooks never run tests. The installer refuses to replace
an existing hooks path.

gitleaks is pinned (8.30.1, SHA-256 verified) by scripts/install-gitleaks.sh;
.gitleaks.toml allowlists only the exact documentation placeholders the
default rules flag. CI scans every commit reachable from HEAD and runs
`make hooks-test`, which commits through the real hooks in a scratch clone
and requires a misformatted Rust change and a staged credential to be
rejected for the right reason, with the credential redacted.

GUI ESLint stays with the deferred UI work. Engine scope of #44.
@jsam
jsam changed the base branch from fm/il-rc1 to main October 3, 2026 20:38
@jsam
jsam marked this pull request as ready for review October 3, 2026 20:38
@jsam jsam closed this Oct 3, 2026
@jsam jsam reopened this Oct 3, 2026
@jsam
jsam merged commit d9631b9 into main Oct 3, 2026
14 checks passed
@jsam
jsam deleted the fm/il-f14 branch October 3, 2026 20:49
jsam added a commit that referenced this pull request Oct 3, 2026
Brings #205, #203 and #207. #207's test-only meta dispatch hook is
installed inside the supervised blocking job.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant