mirror of
https://github.com/rustfs/rustfs.git
synced 2026-08-19 19:16:17 +00:00
overtrue
2f28bb49d1
crates/crypto/src/license_token.rs asserted, via include_str! on its own file, that the license-token signing key is never checked in. The scan saw exactly one file: the key moved anywhere else passed silently, and renaming license_token.rs stopped the guard from compiling instead of reporting. scripts/check_embedded_secrets.sh scans every tracked and not-yet-added text file for the same needle plus the other private-key header forms and eleven provider credential formats, and it does not skip the paths .github/secret_scanning.yml tells push protection to ignore. Non-secret matches are excused by exact literal, never by path glob, and an exemption that stops matching is reported as stale. --self-test asserts every pattern family fires.
32 lines
1.8 KiB
Makefile
32 lines
1.8 KiB
Makefile
## —— Pre Commit Checks ----------------------------------------------------------------------------
|
|
|
|
.NOTPARALLEL: pre-commit pre-pr dev-check
|
|
|
|
.PHONY: setup-hooks
|
|
setup-hooks: ## Set up git hooks
|
|
@echo "🔧 Setting up git hooks..."
|
|
chmod +x .git/hooks/pre-commit
|
|
@echo "✅ Git hooks setup complete!"
|
|
|
|
.PHONY: doc-paths-check
|
|
doc-paths-check: ## Check that instruction/architecture docs reference existing file paths
|
|
@echo "📄 Checking doc path references..."
|
|
./scripts/check_doc_paths.sh
|
|
|
|
.PHONY: planning-docs-check
|
|
planning-docs-check: ## Check that no planning-type documents are committed
|
|
@echo "📄 Checking for committed planning docs..."
|
|
./scripts/check_no_planning_docs.sh
|
|
|
|
.PHONY: pre-commit
|
|
pre-commit: fmt-check unsafe-code-check architecture-migration-check logging-guardrails-check tokio-io-uring-check extension-schema-check body-cache-whitelist-check s3s-footprint-check fips-wording-check embedded-secrets-check doc-paths-check planning-docs-check quick-check ## Run fast pre-commit checks without clippy/full tests
|
|
@echo "✅ All pre-commit checks passed!"
|
|
|
|
.PHONY: pre-pr
|
|
pre-pr: fmt-check unsafe-code-check architecture-migration-check logging-guardrails-check tokio-io-uring-check extension-schema-check body-cache-whitelist-check s3s-footprint-check fips-wording-check embedded-secrets-check doc-paths-check planning-docs-check log-analyzer-rules-check clippy-check test ## Run full pre-PR checks with clippy and tests
|
|
@echo "✅ All pre-PR checks passed!"
|
|
|
|
.PHONY: dev-check
|
|
dev-check: fmt-check unsafe-code-check architecture-migration-check logging-guardrails-check tokio-io-uring-check extension-schema-check body-cache-whitelist-check s3s-footprint-check fips-wording-check embedded-secrets-check doc-paths-check planning-docs-check quick-check ## Run fast local development checks
|
|
@echo "✅ Fast development checks passed!"
|