Make the TruffleHog pre-commit hook Windows-safe #750

Closed
opened 2026-07-25 17:21:11 +00:00 by coilyco-ops · 0 comments
Member

Problem

The catalog TruffleHog pre-commit hook is not portable to this Windows host. A consumer run from coilyco-bridge/agentic-os-kai fails before scanning:

unable to open filter file
file: /dev/fd/63
The system cannot find the path specified.

The consumer pins the agentic-os hook suite at v0.162.0. Other hooks run successfully, and the same task contains no secret values, only SSM parameter names and descriptions.

Acceptance

  • Replace the /dev/fd or process-substitution dependency with a Windows-safe input path while preserving the same exclusions.
  • Keep the hook offline and fail-closed on real scan errors.
  • Prove the hook from a Windows consumer checkout through its normal pre-commit entry.
  • Update the hook documentation if the invocation contract changes.
## Problem The catalog TruffleHog pre-commit hook is not portable to this Windows host. A consumer run from `coilyco-bridge/agentic-os-kai` fails before scanning: ```text unable to open filter file file: /dev/fd/63 The system cannot find the path specified. ``` The consumer pins the agentic-os hook suite at v0.162.0. Other hooks run successfully, and the same task contains no secret values, only SSM parameter names and descriptions. ## Acceptance * Replace the `/dev/fd` or process-substitution dependency with a Windows-safe input path while preserving the same exclusions. * Keep the hook offline and fail-closed on real scan errors. * Prove the hook from a Windows consumer checkout through its normal pre-commit entry. * Update the hook documentation if the invocation contract changes.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
coilyco-flight-deck/agentic-os#750
No description provided.