chore(hygiene): root secret-capture guards — .gitignore patterns + opt-in pre-commit secret scan (plan R2-08 T3)

2026-07-13 09:42:49 -04:00
parent 1429ddaa0e
commit 90cdb6e51a
3 changed files with 36 additions and 0 deletions
@@ -0,0 +1,5 @@
+# Git hooks
+
+`pre-commit` scans the staged diff for obvious credential material (inbound API tokens `sbk_...`, plaintext password assignments in root `.txt`/`.md` additions) and blocks the commit if found (bypass a false positive with `git commit --no-verify`).
+
+Opt in once with: `git config core.hooksPath tools/hooks`