Files
hooks/pre-commit

36 lines
1.1 KiB
Bash
Executable File

#!/usr/bin/env bash
set +eou pipefail
size_limit=$((5 * 2**20))
# make sure we have at least 1 commit in the repo
# so we don't fail on the first commit
test "$(git rev-list --count HEAD 2>/dev/null)" -gt 1 2> /dev/null > /dev/null || \
gitleaks protect --verbose --redact --staged && exit 0
repo_root=$(git rev-parse --show-toplevel)
pushd $repo_root 2>/dev/null > /dev/null
empty_tree=$(git hash-object -t tree /dev/null)
if git rev-parse --verify HEAD > /dev/null 2>&1
then
against=HEAD
else
against="$empty_tree"
fi
IFS='
'
hasLargeFile=false
for file in $(git diff-index --cached --name-only $against); do
file_size=$(([ ! -f $file ] && echo 0) || (ls -la $file | awk '{ print $5 }'))
if [ "$file_size" -gt "$size_limit" ]; then
echo File $file is $(( $file_size / 10**6 )) MB, which is larger than our configured limit of $(( $size_limit / 10**6 )) MB
hasLargeFile=true
fi
done
if $hasLargeFile; then
echo Commit too large, did you add a binary file? For image assets, consider git-lfs.
popd $repo_root 2>/dev/null > /dev/null
exit 1
fi
popd $repo_root 2>/dev/null > /dev/null || true
gitleaks protect --verbose --redact --staged