ci(security): catching leaked API keys before
git push using pre-commit secret scanners đź”’
Running lightweight entropy and regex checks via gitleaks or trufflehog in a local pre-commit hook stops accidental credential commits before they ever touch remote git history. What's the one pre-commit hook you refuse to work without?commit 9a0be99