npx lint-staged

# Secret scanning — gitleaks is REQUIRED (not optional like git-secrets was)
if ! command -v gitleaks &>/dev/null; then
  echo ""
  echo "ERROR: gitleaks is not installed. Secret scanning is required."
  echo ""
  echo "Install:"
  echo "  Linux:   curl -sSfL https://github.com/gitleaks/gitleaks/releases/latest/download/gitleaks_8.24.0_linux_x64.tar.gz | sudo tar -xz -C /usr/local/bin gitleaks"
  echo "  macOS:   brew install gitleaks"
  echo "  Windows: winget install gitleaks"
  echo ""
  exit 1
fi
gitleaks git --pre-commit --redact --staged --verbose