creator/claudekit
1
0
Fork 0
mirror of https://github.com/duthaho/claudekit.git synced 2026-07-18 13:39:40 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat: secret-detection and sensitive-file-guard hooks (#3)

Browse Source
This commit is contained in:
duthaho
2026-07-17 06:29:17 +07:00
committed by GitHub
parent f9841971cc
commit 8710df2704
8 changed files with 256 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
website/src/content/docs/getting-started/configuration.md
+2
View File
@@ -53,6 +53,8 @@ Hooks run automatically in response to Claude Code events:
|------|-------|-------------|
| `auto-format` | After Write/Edit | Runs ruff (Python) or eslint (JS/TS) on changed files |
| `block-dangerous-commands` | Before Bash | Blocks `rm -rf /`, force push to main, `DROP TABLE`, etc. |
| `detect-secrets` | Before Write/Edit | Blocks writes containing secret-looking content (API keys, tokens, private key blocks) |
| `guard-sensitive-files` | Before Write/Edit | Blocks edits to `.env` files, key material (`.pem`/`.key`/`id_rsa`), and credential dotfiles |
| `notify` | Notification | Cross-platform desktop notifications |
Hooks are installed to `.claude/hooks/` with config in `settings.local.json` (gitignored).
website/src/content/docs/getting-started/installation.md
+1 -1
View File
@@ -42,7 +42,7 @@ The wizard interactively installs:
|----------|------|----------|
| **Rules** | API, frontend, migrations, security, testing | `.claude/rules/` |
| **Modes** | brainstorm, deep-research, default, implementation, orchestration, review, token-efficient | `.claude/modes/` |
| **Hooks** | auto-format, block-dangerous-commands, notifications | `.claude/hooks/` + `settings.local.json` |
| **Hooks** | auto-format, block-dangerous-commands, detect-secrets, guard-sensitive-files, notifications | `.claude/hooks/` + `settings.local.json` |
| **MCP Servers** | Context7, Sequential, Playwright, Memory, Filesystem | `.mcp.json` |
Or install everything at once: