Hacker News Reader

Can you run this as a pre-receive hook to actually prevent a public commit if it has suspicious patterns in it?

You can use gitleaks to do this now. I added that feature in v3: https://github.com/zricethezav/gitleaks/releases/tag/v3.0.0