a61b34400b
Improved script portability by switching to `/usr/bin/env bash`, ensuring better support across environments where `bash` may not be the default shell.
31 lines
679 B
Bash
Executable File
31 lines
679 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
mkdir -p "$(dirname -- "${BASH_SOURCE[0]}")/../.git/hooks/"
|
|
PRE_COMMIT_FILE="$(dirname -- "${BASH_SOURCE[0]}")/../.git/hooks/pre-commit"
|
|
|
|
cat <<'EOF' >$PRE_COMMIT_FILE
|
|
#!/bin/bash
|
|
|
|
# directories containing potential secrets
|
|
DIRS="."
|
|
|
|
bold=$(tput bold)
|
|
normal=$(tput sgr0)
|
|
|
|
# allow to read user input, assigns stdin to keyboard
|
|
exec </dev/tty
|
|
|
|
for d in $DIRS; do
|
|
# find files containing secrets that should be encrypted
|
|
for f in $(find "${d}" -type f -regex ".*\.enc\..*"); do
|
|
if ! $(grep -q "unencrypted_suffix" $f); then
|
|
printf '\xF0\x9F\x92\xA5 '
|
|
echo "File $f has non encrypted secrets!"
|
|
exit 1
|
|
fi
|
|
done
|
|
done
|
|
EOF
|
|
|
|
chmod +x $PRE_COMMIT_FILE
|