Circuit-Forge/circuitforge-hooks
5
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions
Centralised git hooks for CircuitForge repos — gitleaks secret + PII scanning
8 commits 1 branch 0 tags 39 KiB
Shell 100%
Find a file
pyr0ball c586b8cf2c feat: add prepare-commit-msg hook to auto-append ticket links 
Detects ticket number from branch name (patterns: feat/42-desc, fix/42-desc,
42-desc, issue-42-desc) and appends the full Forgejo issue URL to the commit
body if not already present.

Closes: Circuit-Forge/circuitforge-infra#20
2026-05-21 08:18:18 -07:00
hooks feat: add prepare-commit-msg hook to auto-append ticket links 2026-05-21 08:18:18 -07:00
tests test: add integration tests for pre-commit and commit-msg hooks 2026-03-07 12:43:28 -08:00
gitleaks.toml fix: allowlist — add regexTarget=match for global allowlist; allow Python private fn on RHS 2026-04-02 23:40:26 -07:00
install.sh feat: add install.sh for one-command hook activation 2026-03-07 12:36:18 -08:00
README.md docs: add README with install and usage instructions 2026-03-07 13:04:49 -08:00

README.md

circuitforge-hooks

Centralised git hooks for all CircuitForge repos.

What it does

  • pre-commit — scans staged changes for secrets and PII via gitleaks
  • commit-msg — enforces conventional commit format
  • pre-push — scans full branch history as a safety net before push

Install

From any CircuitForge product repo root:

bash /Library/Development/CircuitForge/circuitforge-hooks/install.sh

On Heimdall live deploys (/devl/<repo>/), add the same line to the deploy script.

Per-repo allowlists

Create .gitleaks.toml at the repo root to extend the base config:

[extend]
path = "/Library/Development/CircuitForge/circuitforge-hooks/gitleaks.toml"

[allowlist]
regexes = [
    '\d{10}\.html',   # example: Craigslist listing IDs
]

Testing

bash tests/test_hooks.sh

Requirements

  • gitleaks binary: sudo apt-get install gitleaks
  • bash 4+

Adding a new rule

Edit gitleaks.toml. Follow the pattern of the existing [[rules]] blocks. Add tests to tests/test_hooks.sh covering both the blocked and allowed cases.