Security Audit Hook

Check for dependency vulnerabilities before committing

Category:hooks-configs

Type:hook

Difficulty:intermediate

security

pre-commit

devops

intermediate

Description

Pre-commit hook that audits dependencies for known security vulnerabilities. Runs npm audit or pnpm audit and blocks commits if high/critical vulnerabilities are found.

Content

Resource Content

{
  "hooks": {
    "pre-commit": [
      {
        "name": "security-audit",
        "command": "npm audit --audit-level=high",
        "match": "package*.json",
        "description": "Audit dependencies for security vulnerabilities"
      }
    ]
  }
}