Martin Vogel
c371e9f07d
Security audit (Layer 1) new checks: - Time-bomb scan: flags time()/sleep()/clock() near dangerous calls - MCP file read audit: tracks fopen/fread count in mcp.c against expected max (detects data exfiltration through tool responses) Pre-commit hooks now tracked in scripts/hooks/: - Contributors activate with: git config core.hooksPath scripts/hooks - Runs: lint → security audit → build + test - setup.sh already configures this automatically
17 lines
490 B
Bash
Executable File
17 lines
490 B
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
# Pre-commit hook: linters + security audit + build + tests.
|
|
#
|
|
# Activated automatically via scripts/setup.sh or manually:
|
|
# git config core.hooksPath scripts/hooks
|
|
|
|
echo "pre-commit: running all linters in parallel..."
|
|
make -j3 -f Makefile.cbm lint
|
|
|
|
echo "pre-commit: security audit (source-level)..."
|
|
scripts/security-audit.sh
|
|
|
|
echo "pre-commit: building and running tests..."
|
|
make -j$(sysctl -n hw.ncpu 2>/dev/null || nproc) -f Makefile.cbm test
|