mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-07 03:15:56 +00:00
A merge commit bypassed every signature check: test-signed only inspects HEAD and the pre-commit hook does not run for merge commits. Add scripts/git/assert_merge_signed.sh, which fails when any commit the merge brings in (HEAD..MERGE_HEAD) reports %G? status N, wire it up as make test-merge-signed, and register it as a pre-merge-commit hook so pre-commit install now also installs that hook type. Fast-forward merges create no commit and skip the hook (use --no-ff to gate them); conflicted merges fall back to the regular pre-commit and pre-push gates. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>