| name | block-no-verify |
| description | Prevent commits that skip pre-commit hooks (--no-verify, -n). Auto-loads when git commit with bypass flags is attempted. Triggers: commit --no-verify, git commit -n, git push --no-verify. |
| license | MIT |
Block No-Verify
Prevent git commit --no-verify which bypasses security scanning, lint, and pre-commit hooks.
Detection Patterns
Block any of these patterns:
git commit --no-verify
git commit -n
git push --no-verify
git am --no-verify
Response
When detected, respond with:
BLOCKED: git commit with --no-verify detected.
Pre-commit hooks exist for a reason — they run:
- Secret scanning (python .github/scripts/security_scan.py .)
- Linting (ruff check .)
- Guard tests (node .github/hooks/scripts/guard.test.js)
Run without --no-verify to pass all gates, OR
explain why you need to bypass (e.g., emergency hotfix with documented reason).
If you have a valid reason, run:
git commit -m "message" --no-verify
(will be logged for audit)
Governance
If bypass is accepted, document in .kilo/logs/no-verify-audit.md:
- Date and time
- Reason for bypass
- Files changed
- Who approved