Files
hooks/pre-commit
Tai Groot 343fdfcb92 docs: rewrite README, fix pre-commit shellcheck issues
- Complete README rewrite with proper installation instructions
- Added quick install section, configuration section, prerequisites
- Fixed typos (occasionaly, Compatability, alondside)
- pre-commit: use stat instead of parsing ls output (SC2012)
- pre-commit: fix popd called with arguments (SC2164)
- pre-commit: proper IFS newline assignment
- pre-commit: skip non-existent files cleanly
- Fixed repo description typo (usefull → useful)
2026-02-23 10:31:12 +00:00

43 lines
1.1 KiB
Bash
Executable File

#!/usr/bin/env bash
set +eou pipefail
size_limit=$((5 * 2**20))
repo_root=$(git rev-parse --show-toplevel)
pushd "$repo_root" > /dev/null 2>&1 || true
empty=$(git hash-object -t tree /dev/null)
if git rev-parse --verify HEAD > /dev/null 2>&1; then
against=HEAD
else
against="$empty"
fi
IFS=$'\n'
tracked=$(git lfs ls-files --name-only 2>/dev/null)
hasLargeFile=false
for file in $(git diff-index --cached --name-only "$against"); do
for tracked_file in $tracked; do
if [ "$file" == "$tracked_file" ]; then
continue 2
fi
done
if [ ! -f "$file" ]; then
continue
fi
file_size=$(stat --format='%s' "$file" 2>/dev/null || stat -f '%z' "$file" 2>/dev/null || echo 0)
if [ "$file_size" -gt "$size_limit" ]; then
echo "File $file is $((file_size / 10**6))MB, which is larger than our configured limit of $((size_limit / 10**6))MB"
hasLargeFile=true
fi
done
if $hasLargeFile; then
echo "Commit too large, did you add a binary file? For image assets, consider git-lfs."
popd > /dev/null 2>&1 || true
exit 1
fi
popd > /dev/null 2>&1 || true
gitleaks protect --staged --verbose --no-banner --no-color 2>/dev/null