Use a pre-commit hook

[ziadhany]

When you get too excited and prematurely push or commit code, it can result in issues such as password leaks or CI failures. Most of our CI failures are trivial, often caused by forgetting to run the appropriate formatting or tests before pushing. Implementing a pre-commit hook can help prevent these common mistakes.

There are a few options we can consider.

• pre-commit (create our hooks)
• talisman (detects passwords, etc.)
• gitleaks (detects passwords, etc.)

[pombredanne]

And these would also be great candidates for ScanCode.io pipelines, like we have already a virus scan https://github.com/nexB/scancode.io/blob/06548943ca94c4682b760a75329192ce4b57598a/scanpipe/pipes/clamav.py#L32