From c3b0057b4438ed3080b80fe0c8611683138c1bd5 Mon Sep 17 00:00:00 2001 From: Craig Jennings Date: Sun, 19 Apr 2026 07:54:47 -0500 Subject: chore(hooks): add tracked pre-commit hook via githooks/ Portable setup: pre-commit lives in githooks/ (tracked), activated by `make install-hooks` which sets core.hooksPath. Survives fresh clones. The hook does two things on staged changes: - Scans added lines for common credential patterns (AWS keys, sk-* tokens, BEGIN PRIVATE KEY blocks, api_key/password literals) - Runs check-parens on staged .el files Bypass with `git commit --no-verify` for confirmed false positives. --- Makefile | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) (limited to 'Makefile') diff --git a/Makefile b/Makefile index d85a290b..a517c094 100644 --- a/Makefile +++ b/Makefile @@ -40,7 +40,7 @@ EMACS_TEST = $(EMACS_BATCH) -L $(TEST_DIR) -L $(MODULE_DIR) .PHONY: help targets test test-all test-unit test-integration test-file test-name \ validate-parens validate-modules compile lint profile \ - clean clean-compiled clean-tests reset + clean clean-compiled clean-tests reset install-hooks # Alias for help targets: help @@ -70,6 +70,7 @@ help: @echo " make clean-compiled - Remove .elc/.eln files only" @echo " make clean-tests - Remove test artifacts only" @echo " make reset - Reset to first launch (DESTRUCTIVE!)" + @echo " make install-hooks - Activate tracked git hooks (githooks/)" @echo "" @echo "Examples:" @echo " make test-file FILE=test-custom-buffer-file-copy-whole-buffer.el" @@ -365,3 +366,11 @@ reset: @find $(EMACS_HOME) -name "*.eln" -type f -delete @find $(EMACS_HOME) -name "*.elc" -type f -delete @echo "✓ Reset complete" + +install-hooks: + @echo "Activating tracked git hooks from githooks/..." + @git config core.hooksPath githooks + @chmod +x githooks/* 2>/dev/null || true + @echo "✓ core.hooksPath set to githooks/" + @echo " Active hooks:" + @ls -1 githooks/ 2>/dev/null | grep -v '\.md$$' | sed 's/^/ /' -- cgit v1.2.3