Jochen "im Blaumann" Metzger jmetzger

Claude Code Hooks: sops + age Verschlüsselung & Credential-Schutz

Zwei Schutzschichten stellen sicher, dass Secrets niemals im LLM-Kontext landen – weder durch direktes Lesen noch durch Ausgabe in der Shell, noch durch Muster im Bash-Output.

Architektur

Claude führt Bash aus     →  PreToolUse: inject_env.sh           →  Env-Vars vorangestellt (sops on-the-fly)
Claude führt Bash aus → PreToolUse: block_env_output.sh → BLOCKED wenn env/printenv/echo $SECRET

Typo3 - Downloader

Put both files in the same directory. Execute the downloader - script

/bin/bash typo3_download_latest.sh

The script will check, if the downloaded file exists already, if not download it.

	/**
	* draw.io Plugin: Quick Nodes
	*
	* Extras → "Quick Nodes" – eine Node-Bezeichnung pro Zeile.
	* Zeichnet die Boxen in einem Raster auf dem Canvas.
	*
	* Installation:
	* draw.io Desktop: Extras → Plugins → Add → diese Datei → Neustart
	*/
	Draw.loadPlugin(function (ui) {

	#!/bin/bash

	###
	# This script install puppet version 3.7 (or better latest) on debian etch


	MAJOR_VERSION=$(cat /etc/debian_version \| cut -d'.' -f 1)

	if [ $MAJOR_VERSION -ne 4 ]
	then

	class profile::www::typo3::wheezy {

	# debian specific
	$cli_inifile = '/etc/php5/cli/php.ini'

	file { '/etc/php5':
	ensure => 'directory'
	} ->

	file { '/etc/php5/cli':

	#!/bin/bash

	CF=~/.git-dprz.sh

	function info {

	cat <<- INFO
	-- Script for downloading PRIVATE(!) git-repos as tar-archive on old systems (like Debian Etch)
	-- That only have old git - binaries
	--

	#!/usr/bin/php
	<?php

	class ConfigManager {

	var $lines;
	var $pathFilename;
	var $uninstallExtensions;

	public function __construct(){

	@echo off
	powershell -ExecutionPolicy Bypass -File "%~dp0wsl-setup.ps1"