OWASP DevSecOps Guideline - v-0.2
Pre-commit
The Pre-commit fase is important because it can prevent security issues before they are submitted to a central (Git) repository.
Making sure that there are no secrets in the code, and that the code follows certain guidelines (According to the Linter rules) will result in a higher quality code.
In the following, we take a look into different types of pre-commit actions that are as follows:
- Secrets Management
- Linting Code
The following image can give you a better view of what the pre-commit means and why we must consider it.
Tools:
- Pre-Commit - A framework for managing and maintaining multi-language pre-commit hooks.