git config core.hooksPath .githooksThat enables a pre-commit hook which refuses to commit secrets and customer
hostnames. It uses gitleaks
(brew install gitleaks) and the rules in .gitleaks.toml; without gitleaks
installed it steps aside and CI catches the same thing on push.
Sample and config files must use example.com and placeholder values. Real
credentials belong in environment variables or the deployment's secret store —
never in a file that gets committed.
go build ./...
go test ./...