pre-push

Pre-Push Pipeline

Dominant Variable

Does the secrets scanner run without exception — a single skip permanently records credentials in git history.

Trigger

• Any git push request, including the push-intent phrases listed in the description.

Discard If

• User explicitly says "skip review" → proceed directly to Emergency Override (a request to force-push is never a trigger: this skill never force-pushes)
• 0 staged files AND 0 outgoing (already-committed, not-yet-pushed) commits — check both before discarding: git rev-list --count '@{upstream}'..HEAD 2>/dev/null || git rev-list --count origin/HEAD..HEAD 2>/dev/null. If outgoing has 1+ commits, this is NOT a discard case — proceed to Step 1 so the outgoing commits get scanned too (a secret committed earlier this session, with staging now empty, used to slip past a staged-files-only check entirely).
• *.md / docs/** changes only (fast-exit at Step 2, but agent review overhead unnecessary at this condition). This skips the agent-review overhead only — Step 1/2 scanning (and Step 3.5 when a public-mirror scrub is configured) still runs; the Step 2 fast-exit fires only after SECRETS_EXIT=0 is already known, not before scanning.

Key Assumptions

1. A bundled scanner is accessible (scan_secrets.py with Python 3.9+, or scan_secrets.pl with Perl) — if broken: secrets scan unavailable → push blocked.
2. git staged files exist — if broken: inform user and halt.
3. Review agents dispatchable — the agents named in Step 6 (code-reviewer, security-reviewer, database-reviewer, refactor-cleaner, build-error-resolver) are optional and not included in this repo (/setup can generate code-reviewer, security-reviewer, database-reviewer and build-error-resolver agents). If an agent is not installed or cannot be dispatched, replace code-reviewer with an inline review using code-autopsy's FAST MODE (shipped in this repo; see Error Recovery below) rather than skipping it outright. Conditional agents (security/database/refactor) are skipped with an explicit SKIPPED note in the report.