trufflehog pre-commit hook fails on Windows: /dev/fd/63 process substitution unavailable #481

New issue

Closed

opened 2026-07-12 21:16:28 +00:00 by coilyco-ops · 1 comment

coilyco-ops commented

2026-07-12 21:16:28 +00:00

Owner

On kai-desktop-tower (Windows, Git Bash hook runtime), the managed trufflehog hook fails before scanning:

error trufflehog unable to open filter file {file: /dev/fd/63, error: open /dev/fd/63: The system cannot find the path specified.}

The wrapper feeds the exclude list via process substitution, which has no /dev/fd on this Git Bash. Every commit from a Windows host hits this, so the secret-scan backstop is effectively absent there (leak-check still runs). Fix candidates: write the filter list to a real temp file instead of <(...), or gate the flag on platform. Found 2026-07-12 while landing coilyco-bridge/agentic-os-kai#739.

On kai-desktop-tower (Windows, Git Bash hook runtime), the managed trufflehog hook fails before scanning: error trufflehog unable to open filter file {file: /dev/fd/63, error: open /dev/fd/63: The system cannot find the path specified.} The wrapper feeds the exclude list via process substitution, which has no /dev/fd on this Git Bash. Every commit from a Windows host hits this, so the secret-scan backstop is effectively absent there (leak-check still runs). Fix candidates: write the filter list to a real temp file instead of <(...), or gate the flag on platform. Found 2026-07-12 while landing coilyco-bridge/agentic-os-kai#739.