tupe12334 opened a new issue, #38748:
URL: https://github.com/apache/superset/issues/38748

   ## Problem
   
   Claude Code agents can silently bypass git hooks by running git commit with 
the hook-skip flag. This disables pre-commit, commit-msg, and pre-push hooks — 
which matters especially here since Superset already runs `pre-commit` via a 
`PreToolUse` hook.
   
   ## Solution
   
   Add [`block-no-verify`](https://github.com/tupe12334/block-no-verify) as a 
`PreToolUse` Bash hook in `.claude/settings.json`. It reads 
`tool_input.command` from the Claude Code hook stdin payload, detects the 
hook-bypass flag across all git subcommands, and exits 2 to block the attempt 
before git even runs.
   
   The existing `pre-commit` runner hook is preserved unchanged.
   
   ---
   
   _Disclosure: I am the author and maintainer of `block-no-verify`._
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to