updated precommit hook to only block on valid secrets

This commit is contained in:
Mick Grove 2025-07-28 11:05:15 -07:00
commit 7983cacd2f

View file

@ -57,7 +57,7 @@ if ! command -v kingfisher >/dev/null 2>&1; then
fi
git diff --cached --name-only -z | \
xargs -0 --no-run-if-empty kingfisher scan --no-update-check
xargs -0 --no-run-if-empty kingfisher scan --only-valid --no-update-check
status=$?
if [[ $status -ne 0 ]]; then
echo "Kingfisher detected secrets in staged files. Commit aborted." >&2