Client-Side Hooks

ls .git/hooks/
# applypatch-msg.sample  post-update.sample  pre-commit.sample
# commit-msg.sample     pre-applypatch.sample pre-push.sample
# post-commit.sample    pre-rebase.sample    prepare-commit-msg.sample

#!/bin/sh
# .git/hooks/pre-commit
echo "Running pre-commit checks..."
exit 0

#!/bin/sh
#
# pre-commit: Lint staged files before allowing a commit.
#

# Redirect output to stderr.
exec 1>&2

# Get the list of staged files (added or modified).
STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACM)

# Check for TypeScript/JavaScript files.
if echo "$STAGED_FILES" | grep -qE '\.(ts|tsx|js|jsx)$'; then
  echo "Running ESLint on staged files..."

  # Lint only the staged files.
  echo "$STAGED_FILES" | xargs npx eslint --max-warnings=0

  if [ $? -ne 0 ]; then
    echo ""
    echo "❌ Lint failed. Fix errors before committing."
    echo "   To skip this hook (not recommended): git commit --no-verify"
    exit 1
  fi
fi

# Check for secrets or API keys.
if echo "$STAGED_FILES" | xargs grep -lE '(AKIA[0-9A-Z]{16}|sk_live_[a-zA-Z0-9]+)'; then
  echo ""
  echo "❌ Potential secrets found in staged files!"
  exit 1
fi

echo "✅ All checks passed."
exit 0

#!/bin/sh
#
# commit-msg: Enforce Conventional Commits format.
#
# Expected: <type>(<scope>): <description>
# Valid types: feat, fix, docs, style, refactor, test, chore, perf, ci, build
#

COMMIT_MSG_FILE=$1
COMMIT_MSG=$(cat "$COMMIT_MSG_FILE")

# Pattern: type(optional-scope): description
PATTERN='^(feat|fix|docs|style|refactor|test|chore|perf|ci|build)(\(.+\))?!?: .{1,72}'

if ! echo "$COMMIT_MSG" | grep -qE "$PATTERN"; then
  echo ""
  echo "❌ Invalid commit message format."
  echo ""
  echo "   Expected: <type>(<scope>): <description>"
  echo "   Examples:"
  echo "     feat: add login page"
  echo "     fix(auth): handle expired tokens"
  echo "     docs: update API reference"
  echo ""
  echo "   Valid types: feat, fix, docs, style, refactor, test, chore, perf, ci, build"
  echo ""
  echo "   Your message: $COMMIT_MSG"
  exit 1
fi

echo "✅ Commit message is valid."
exit 0

#!/bin/sh
#
# prepare-commit-msg: Prepend branch name to commit message.
#

COMMIT_MSG_FILE=$1
SOURCE=$2

# Only modify commits created by the user (not merges, squashes, etc.)
if [ "$SOURCE" != "message" ] && [ "$SOURCE" != "commit" ]; then
  exit 0
fi

# Get the current branch name.
BRANCH=$(git symbolic-ref --short HEAD 2>/dev/null)

# Skip if on main or detached HEAD.
if [ -z "$BRANCH" ] || [ "$BRANCH" = "main" ] || [ "$BRANCH" = "master" ]; then
  exit 0
fi

# Prepend the branch name as a scope.
sed -i.bak -e "1s/^[[:space:]]*/[$BRANCH] /" "$COMMIT_MSG_FILE"

#!/bin/sh
#
# pre-push: Prevent pushing to main/master.
#

REMOTE=$1
URL=$2

# Read the refspecs from stdin.
while read LOCAL_REF LOCAL_SHA REMOTE_REF REMOTE_SHA; do
  BRANCH=$(echo "$LOCAL_REF" | sed -e 's|^refs/heads/||')

  if [ "$BRANCH" = "main" ] || [ "$BRANCH" = "master" ]; then
    echo ""
    echo "❌ Direct push to main/master is not allowed."
    echo "   Create a pull request instead."
    echo ""
    exit 1
  fi
done

exit 0