mirror of
https://github.com/jmagar/unraid-mcp
synced 2026-04-21 13:37:53 +00:00
0085fe83d4
Blocks any *.env* file from being committed except .env.example. Prevents credential leaks like the .env.backup incidents.
13 lines
419 B
Bash
Executable file
13 lines
419 B
Bash
Executable file
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
staged=$(git diff --cached --name-only)
|
|
blocked=$(printf '%s
|
|
' "$staged" | grep -E '(^|/)[^/]*\.env[^/]*$' | grep -v '\.env\.example$' || true)
|
|
|
|
if [[ -n "$blocked" ]]; then
|
|
echo "block-env-commits: BLOCKED — .env file(s) staged for commit:" >&2
|
|
echo "$blocked" | sed 's/^/ /' >&2
|
|
echo "Only .env.example is allowed. Remove staged file(s) and try again." >&2
|
|
exit 1
|
|
fi
|