Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .codemie/claude.extension.json
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{
"version": "1.0.6",
"installedAt": "2026-02-06T16:36:05.246Z"
"version": "1.0.14",
"installedAt": "2026-03-25T14:06:12.886Z"
}
11 changes: 0 additions & 11 deletions .gitleaks.toml

This file was deleted.

21 changes: 1 addition & 20 deletions .husky/pre-commit
Original file line number Diff line number Diff line change
@@ -1,21 +1,2 @@
npm run check:pre-commit

# Check for secrets (only if Docker daemon is running)
if command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then
echo "Checking for secrets with Gitleaks..."
npm run secrets:check || {
echo "Secrets detected! Please remove sensitive data before committing."
exit 1
}
else
if command -v colima >/dev/null 2>&1; then
echo "Docker daemon not running - Colima is installed"
echo "Run 'colima start' to enable secrets detection locally"
elif command -v podman >/dev/null 2>&1; then
echo "Docker daemon not running - Podman is installed"
echo "Run 'podman machine start' to enable secrets detection locally"
else
echo "Docker not available - skipping secrets detection"
echo "Install Docker to enable local secrets scanning"
fi
fi
npm run secrets:check
1 change: 1 addition & 0 deletions cspell.config.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -202,6 +202,7 @@ words:
- phpt
- rhtml
# Shell commands, utilities and variables
- orbstack
- pwgen
- bcrypt
- urandom
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@ curl -X 'POST' \
'http://localhost:8080/v1/assistants/{assistant_id}/model' \
-H 'accept: application/json' \
-H 'user-id: example-user' \
-H 'Authorization: Bearer example-token' \
-H 'Authorization: Bearer <example-token>' \
-H 'Content-Type: application/json' \
-d '{
"text": "Show my current Jira tickets",
Expand Down
4 changes: 2 additions & 2 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -21,8 +21,8 @@
"format:eslint": "eslint . --fix",
"format:prettier": "prettier --write .",
"typecheck": "tsc --noEmit",
"secrets:check": "docker run --rm -v \"$(pwd):/path\" ghcr.io/gitleaks/gitleaks:v8.30.1 detect --source=\"/path\" --verbose --no-git",
"secrets:check-git": "docker run --rm -v \"$(pwd):/path\" ghcr.io/gitleaks/gitleaks:v8.30.1 detect --source=\"/path\" --verbose",
"secrets:check": "sh scripts/secrets-check.sh",
"secrets:check-git": "sh scripts/secrets-check.sh --git",
"commitlint": "commitlint --edit",
"commitlint:last": "commitlint --from HEAD~1 --to HEAD --verbose",
"commitlint:test": "commitlint --verbose",
Expand Down
43 changes: 43 additions & 0 deletions scripts/secrets-check.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
#!/usr/bin/env bash
# Secrets detection using Gitleaks via Docker or Podman.
# Usage:
# scripts/secrets-check.sh # scan staged files
# scripts/secrets-check.sh --git # scan full git history

GITLEAKS_IMAGE="ghcr.io/gitleaks/gitleaks:v8.30.1"
CONTAINER_ENGINE=$(command -v docker 2>/dev/null || command -v podman 2>/dev/null)

if [[ -z "$CONTAINER_ENGINE" ]]; then
echo "No suitable container engine found - skipping secrets detection"
echo "Install Docker to enable local secrets scanning"
exit 1
fi

if ! $CONTAINER_ENGINE info >/dev/null 2>&1; then
if command -v colima >/dev/null 2>&1; then
echo "Docker daemon not running - Colima is installed"
echo "Run 'colima start' to enable secrets detection locally"
elif command -v podman >/dev/null 2>&1; then
echo "Docker daemon not running - Podman is installed"
echo "Run 'podman machine start' to enable secrets detection locally"
elif command -v orbstack >/dev/null 2>&1; then
echo "Docker daemon not running - OrbStack is installed"
echo "Start OrbStack to enable secrets detection locally"
else
echo "Container engine found but daemon is not running"
fi
exit 1
fi

echo "Checking for secrets with Gitleaks..."

if [[ "$1" == "--git" ]]; then
$CONTAINER_ENGINE run --rm -v "$(pwd):/path" "$GITLEAKS_IMAGE" git --no-banner --verbose /path
else
$CONTAINER_ENGINE run --rm -v "$(pwd):/path" "$GITLEAKS_IMAGE" dir --no-banner --verbose /path
fi

if [[ $? -ne 0 ]]; then
echo "Secrets detected! Please remove sensitive data before committing."
exit 1
fi
Loading