Skip to content

Add detect-secrets pre-commit hook and baseline #18

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tsvikas merged 8 commits into from
Apr 8, 2026
Merged

Add detect-secrets pre-commit hook and baseline #18

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
6860318
Add detect-secrets pre-commit hook with baseline
claude Apr 8, 2026
43c3346
Revert "Add detect-secrets pre-commit hook with baseline"
claude Apr 8, 2026
6e670a6
Add detect-secrets pre-commit hook to project template
claude Apr 8, 2026
4f2fa07
Separate detect-secrets baseline into its own init commit
claude Apr 8, 2026
0fced22
Only stage .secrets.baseline in init commit
claude Apr 8, 2026
65656f2
Fail init if detect-secrets finds secrets in initial scan
claude Apr 8, 2026
2b7b7bf
Use detect-secrets-hook to verify no secrets before generating baseline
claude Apr 8, 2026
7ea841b
Fix uvx commands to use --from detect-secrets
claude Apr 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions project_name/.pre-commit-config.yaml.jinja
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -87,6 +87,13 @@ repos:
# UTF-8 encoding
- id: text-unicode-replacement-char

# Security
- repo: https://github.com/Yelp/detect-secrets
rev: <placeholder_until_update_deps>
hooks:
- id: detect-secrets
args: ['--baseline', '.secrets.baseline']

# All files
- repo: https://github.com/editorconfig-checker/editorconfig-checker.python
rev: <placeholder_until_update_deps>
Expand Down
4 changes: 4 additions & 0 deletions project_name/justfile.jinja
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ init: && prepare
just deps-update
git add --all
[ -z "$(git status --porcelain)" ] || git commit -m "⬆️ Updated project dependencies"
uvx --from detect-secrets detect-secrets-hook $(git ls-files)
uvx --from detect-secrets detect-secrets scan > .secrets.baseline
git add .secrets.baseline
git commit -m "🔒 Add detect-secrets baseline"

# Setup the project after cloning
prepare:
Expand Down
Loading