From ed05b4cdaf9ca79645393537b0f680e824f8c249 Mon Sep 17 00:00:00 2001
From: Adil Hafeez <adil.hafeez@gmail.com>
Date: Fri, 13 Feb 2026 15:31:48 -0800
Subject: [PATCH] Add .env.local to gitignore and gitleaks pre-commit hook

Prevent future secret leaks by ignoring .env.local files and adding
gitleaks secret scanning to the pre-commit pipeline.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .gitignore              | 2 ++
 .pre-commit-config.yaml | 5 +++++
 2 files changed, 7 insertions(+)

diff --git a/.gitignore b/.gitignore
index 795fcad0..af706ea4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -80,6 +80,8 @@ celerybeat-schedule
 
 # Environments
 .env
+.env.local
+.env*.local
 .venv
 env/
 venv/
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 42b43943..84001c45 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -30,6 +30,11 @@ repos:
         entry: bash -c "cd crates && cargo test --lib"
         pass_filenames: false
 
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.21.2
+    hooks:
+      - id: gitleaks
+
   - repo: https://github.com/psf/black
     rev: 23.1.0
     hooks: