Pre-commit hook to help prevent key leakage

pre-commit

#!/bin/bash
#
# Warn about possible cloud access keys before committing
#
exec </dev/tty
unset possible_keys
possible_keys=$(git diff --cached | egrep '^[+\-].*(AKIA|AWS_ACCESS|AWS_SECRET|OS_PASSWORD|OS_USERNAME)')
if [[ -n "$possible_keys" ]];then
    echo -e "WARNING: Diff contains possible access keys:\n"
    echo "${possible_keys}"
    echo ""
    read -p "Continue to commit? (y/n)" answer
    case $answer in
        y*)
            echo "OK. Committing."
            exit 0
            ;;
        n*)
            echo "OK. Not Committing."
            exit 1
            ;;
    esac
fi