Files
hooks/pre-commit

39 lines
1.1 KiB
Bash
Executable File

#!/usr/bin/env bash
set +eou pipefail
size_limit=$((5 * 2**20))
repo_root=$(git rev-parse --show-toplevel)
pushd "$repo_root" 2>/dev/null > /dev/null || true
empty=$(git hash-object -t tree /dev/null)
if git rev-parse --verify HEAD > /dev/null 2>&1
then
against=HEAD
else
against="$empty"
fi
IFS='
'
tracked=$(git lfs ls-files --name-only)
hasLargeFile=false
for file in $(git diff-index --cached --name-only "$against"); do
for tracked_file in $tracked; do
if [ "$file" == "$tracked_file" ]; then
continue 2
fi
done
# shellcheck disable=SC2012
file_size=$( ([ ! -f "$file" ] && echo 0) || ls -la "$file" | awk '{ print $5 }' )
if [ "$file_size" -gt "$size_limit" ]; then
echo File "$file" is "$(( file_size / 10**6 ))"MB, which is larger than our configured limit of "$(( size_limit / 10**6 ))"MB
hasLargeFile=true
fi
done
if $hasLargeFile; then
echo Commit too large, did you add a binary file? For image assets, consider git-lfs.
popd "$repo_root" 2>/dev/null > /dev/null || true
exit 1
fi
popd "$repo_root" 2>/dev/null > /dev/null || true
gitleaks protect --staged --verbose --no-banner --no-color 2>/dev/null