Create a Nosey Parker pre-commit hook

[bradlarsen]

pre-commit is a popular tool for managing client-side Git pre-commit hooks. It would be useful for developers and defensive security purposes if Nosey Parker provided a pre-commit hook that would check for secrets.

A number of other secret detection tools provide hooks like this:

• ripsecrets
• ggshield
• gitleaks
• detect-secrets

[bradlarsen]

As I remarked a while back in #98: an integration like this that can prevent a commit or break a build has much tighter requirements around false positives than a tool for pentesting. A custom ruleset that only enables high-precision rules might be one way to approach this.

[luizvbo]

Hi @bradlarsen, is this issue still relevant? May you assign it to me?

[mickgmdb]

You could use this one without many changes, or as the basis for developing your own:
https://github.com/mongodb/kingfisher/blob/main/install-precommit-hook.sh

[bradlarsen]

@luizvbo yes, it's still relevant, and what @mickgmdb points you to would be a good start, as Kingfisher was forked from Nosey Parker and much of its interface and internals are similar.

I'm no longer with Praetorian and no longer have admin privileges on Nosey Parker, so unfortunately I cannot assign this to you or merge any contribution you make. I'm not sure how Praetorian will choose to continue this project.