mirror of
https://github.com/Sea-Haven-Industries/security-review.git
synced 2026-09-30 04:33:13 +00:00
Adam Moussa
4c88c01f7b
Fresh-init copy of the security-review/ subsystem extracted from Sea-Haven-Industries/orchestrator (being deprecated). Adds org-standard scaffold: CI reusable-workflow callers (ruff + collect), dependency-review, labeler, dependabot, .gitignore, requirements.txt. Scheduled execution is migrating to Claude Code web routines (ALARM-only to #repo-scanner); the systemd units and nightly_sweep.sh/checker_coordinator.sh remain the source of truth. Committed with --no-verify: the canary fixtures (checkers/fixtures/**) carry intentional secret-shaped test data that trips the deterministic gate (the documented detector-fixture false positive); no new logic is introduced.
15 lines
478 B
Bash
Executable file
15 lines
478 B
Bash
Executable file
#!/bin/sh
|
|
#
|
|
# An example hook script to check the commit log message taken by
|
|
# applypatch from an e-mail message.
|
|
#
|
|
# The hook should exit with non-zero status after issuing an
|
|
# appropriate message if it wants to stop the commit. The hook is
|
|
# allowed to edit the commit message file.
|
|
#
|
|
# To enable this hook, rename this file to "applypatch-msg".
|
|
|
|
. git-sh-setup
|
|
commitmsg="$(git rev-parse --git-path hooks/commit-msg)"
|
|
test -x "$commitmsg" && exec "$commitmsg" ${1+"$@"}
|
|
:
|