chore(work): finish 07-gitleaks-precommit

This commit is contained in:
2026-05-14 20:01:16 +02:00
parent 9b235c7d1c
commit 41bf107fc4
2 changed files with 5 additions and 10 deletions

View File

@@ -3,7 +3,7 @@ id: 07-gitleaks-precommit
epic: 2026-05-14-ci-security-and-supply-chain
title: Gitleaks pre-commit hook
type: technical-story
status: todo
status: done
feature: tooling
depends-on: []
blocks: [09-ci-security-guide-and-docs]
@@ -36,4 +36,4 @@ Developer accidents (pasting tokens into config, seeding test fixtures with real
## Tasks
- [ ] Add `gitleaks protect --staged --redact` step to `.husky/pre-commit` (exit-gracefully if `gitleaks` not in `$PATH`); create `.gitleaks.toml` at repo root with `__seeds__/**` allowlist for test-fixture patterns; one commit, all gates pass.
- [x] Add `gitleaks protect --staged --redact` step to `.husky/pre-commit` (exit-gracefully if `gitleaks` not in `$PATH`); create `.gitleaks.toml` at repo root with `__seeds__/**` allowlist for test-fixture patterns; one commit, all gates pass.