Git Hooks Toolkit

CI catches problems after the push. Git hooks catch them before the commit. This toolkit installs a complete set of client-side hooks that prevent the most common mistakes developers make every day.

Four hooks, one install command:

1. pre-commit — Scans staged files for AWS keys, Stripe secrets, GitHub PATs, private keys, JWTs, database URIs, Slack tokens, and generic API key patterns. Also catches merge conflict markers, debug statements (console.log, debugger, binding.pry), and files over 10MB. Each check can be individually skipped via environment variables.

2. commit-msg — Enforces conventional commit format (feat/fix/docs/chore etc.) with optional scope, 72-char limit, and no trailing periods. Allows merge commits through automatically.

3. pre-push — Blocks direct pushes to main/master/production. Warns on non-conventional branch names and WIP/fixup/squash commits that should be cleaned up before pushing.

4. install-hooks.sh — One command installs all hooks. Backs up existing hooks first. Supports --uninstall to restore originals and --check to verify installation.

Configurable via .githooks.yml — Add custom secret patterns, adjust file size limits, configure protected branches, define allowed commit types, and allowlist files for debug statements.

Why this is worth $2: Every team needs these hooks but nobody wants to write them from scratch. These scripts handle edge cases (binary files, empty diffs, merge commits), run in milliseconds, work offline, and are battle-tested. Saves hours of CI debugging by catching issues at commit time. Works on macOS and Linux with bash 4+ and standard Unix tools.