No. 013Free
ShipGate: scan before a repo goes public
A pre-publish gate: gitleaks and trufflehog over the whole history, plus LICENSE, .env and attribution checks, in one exit code. Wire it as a pre-push hook.
About it
Before any repo goes public, ShipGate runs the secret scanners across every commit, checks a LICENSE exists, that no .env is tracked and that attributions are present, and returns one exit code. A failure stops the push. Limits: Scanners find known secret shapes only. A missing scanner warns and the other checks still run, so install both. A rotated key already in history still needs a history rewrite. Door 14 of 100 Doors.