Documentation / githooks.txton commit cocci: simplify check for trivial format strings (ae239fc)
   1githooks(5)
   2===========
   3
   4NAME
   5----
   6githooks - Hooks used by Git
   7
   8SYNOPSIS
   9--------
  10$GIT_DIR/hooks/* (or \`git config core.hooksPath`/*)
  11
  12
  13DESCRIPTION
  14-----------
  15
  16Hooks are programs you can place in a hooks directory to trigger
  17actions at certain points in git's execution. Hooks that don't have
  18the executable bit set are ignored.
  19
  20By default the hooks directory is `$GIT_DIR/hooks`, but that can be
  21changed via the `core.hooksPath` configuration variable (see
  22linkgit:git-config[1]).
  23
  24Before Git invokes a hook, it changes its working directory to either
  25$GIT_DIR in a bare repository or the root of the working tree in a non-bare
  26repository. An exception are hooks triggered during a push ('pre-receive',
  27'update', 'post-receive', 'post-update', 'push-to-checkout') which are always
  28executed in $GIT_DIR.
  29
  30Hooks can get their arguments via the environment, command-line
  31arguments, and stdin. See the documentation for each hook below for
  32details.
  33
  34'git init' may copy hooks to the new repository, depending on its
  35configuration. See the "TEMPLATE DIRECTORY" section in
  36linkgit:git-init[1] for details. When the rest of this document refers
  37to "default hooks" it's talking about the default template shipped
  38with Git.
  39
  40The currently supported hooks are described below.
  41
  42HOOKS
  43-----
  44
  45applypatch-msg
  46~~~~~~~~~~~~~~
  47
  48This hook is invoked by 'git am'.  It takes a single
  49parameter, the name of the file that holds the proposed commit
  50log message.  Exiting with a non-zero status causes 'git am' to abort
  51before applying the patch.
  52
  53The hook is allowed to edit the message file in place, and can
  54be used to normalize the message into some project standard
  55format. It can also be used to refuse the commit after inspecting
  56the message file.
  57
  58The default 'applypatch-msg' hook, when enabled, runs the
  59'commit-msg' hook, if the latter is enabled.
  60
  61pre-applypatch
  62~~~~~~~~~~~~~~
  63
  64This hook is invoked by 'git am'.  It takes no parameter, and is
  65invoked after the patch is applied, but before a commit is made.
  66
  67If it exits with non-zero status, then the working tree will not be
  68committed after applying the patch.
  69
  70It can be used to inspect the current working tree and refuse to
  71make a commit if it does not pass certain test.
  72
  73The default 'pre-applypatch' hook, when enabled, runs the
  74'pre-commit' hook, if the latter is enabled.
  75
  76post-applypatch
  77~~~~~~~~~~~~~~~
  78
  79This hook is invoked by 'git am'.  It takes no parameter,
  80and is invoked after the patch is applied and a commit is made.
  81
  82This hook is meant primarily for notification, and cannot affect
  83the outcome of 'git am'.
  84
  85pre-commit
  86~~~~~~~~~~
  87
  88This hook is invoked by 'git commit', and can be bypassed
  89with the `--no-verify` option.  It takes no parameters, and is
  90invoked before obtaining the proposed commit log message and
  91making a commit.  Exiting with a non-zero status from this script
  92causes the 'git commit' command to abort before creating a commit.
  93
  94The default 'pre-commit' hook, when enabled, catches introduction
  95of lines with trailing whitespaces and aborts the commit when
  96such a line is found.
  97
  98All the 'git commit' hooks are invoked with the environment
  99variable `GIT_EDITOR=:` if the command will not bring up an editor
 100to modify the commit message.
 101
 102prepare-commit-msg
 103~~~~~~~~~~~~~~~~~~
 104
 105This hook is invoked by 'git commit' right after preparing the
 106default log message, and before the editor is started.
 107
 108It takes one to three parameters.  The first is the name of the file
 109that contains the commit log message.  The second is the source of the commit
 110message, and can be: `message` (if a `-m` or `-F` option was
 111given); `template` (if a `-t` option was given or the
 112configuration option `commit.template` is set); `merge` (if the
 113commit is a merge or a `.git/MERGE_MSG` file exists); `squash`
 114(if a `.git/SQUASH_MSG` file exists); or `commit`, followed by
 115a commit SHA-1 (if a `-c`, `-C` or `--amend` option was given).
 116
 117If the exit status is non-zero, 'git commit' will abort.
 118
 119The purpose of the hook is to edit the message file in place, and
 120it is not suppressed by the `--no-verify` option.  A non-zero exit
 121means a failure of the hook and aborts the commit.  It should not
 122be used as replacement for pre-commit hook.
 123
 124The sample `prepare-commit-msg` hook that comes with Git removes the
 125help message found in the commented portion of the commit template.
 126
 127commit-msg
 128~~~~~~~~~~
 129
 130This hook is invoked by 'git commit' and 'git merge', and can be
 131bypassed with the `--no-verify` option.  It takes a single parameter,
 132the name of the file that holds the proposed commit log message.
 133Exiting with a non-zero status causes the command to abort.
 134
 135The hook is allowed to edit the message file in place, and can be used
 136to normalize the message into some project standard format. It
 137can also be used to refuse the commit after inspecting the message
 138file.
 139
 140The default 'commit-msg' hook, when enabled, detects duplicate
 141"Signed-off-by" lines, and aborts the commit if one is found.
 142
 143post-commit
 144~~~~~~~~~~~
 145
 146This hook is invoked by 'git commit'. It takes no parameters, and is
 147invoked after a commit is made.
 148
 149This hook is meant primarily for notification, and cannot affect
 150the outcome of 'git commit'.
 151
 152pre-rebase
 153~~~~~~~~~~
 154
 155This hook is called by 'git rebase' and can be used to prevent a
 156branch from getting rebased.  The hook may be called with one or
 157two parameters.  The first parameter is the upstream from which
 158the series was forked.  The second parameter is the branch being
 159rebased, and is not set when rebasing the current branch.
 160
 161post-checkout
 162~~~~~~~~~~~~~
 163
 164This hook is invoked when a 'git checkout' is run after having updated the
 165worktree.  The hook is given three parameters: the ref of the previous HEAD,
 166the ref of the new HEAD (which may or may not have changed), and a flag
 167indicating whether the checkout was a branch checkout (changing branches,
 168flag=1) or a file checkout (retrieving a file from the index, flag=0).
 169This hook cannot affect the outcome of 'git checkout'.
 170
 171It is also run after 'git clone', unless the --no-checkout (-n) option is
 172used. The first parameter given to the hook is the null-ref, the second the
 173ref of the new HEAD and the flag is always 1. Likewise for 'git worktree add'
 174unless --no-checkout is used.
 175
 176This hook can be used to perform repository validity checks, auto-display
 177differences from the previous HEAD if different, or set working dir metadata
 178properties.
 179
 180post-merge
 181~~~~~~~~~~
 182
 183This hook is invoked by 'git merge', which happens when a 'git pull'
 184is done on a local repository.  The hook takes a single parameter, a status
 185flag specifying whether or not the merge being done was a squash merge.
 186This hook cannot affect the outcome of 'git merge' and is not executed,
 187if the merge failed due to conflicts.
 188
 189This hook can be used in conjunction with a corresponding pre-commit hook to
 190save and restore any form of metadata associated with the working tree
 191(e.g.: permissions/ownership, ACLS, etc).  See contrib/hooks/setgitperms.perl
 192for an example of how to do this.
 193
 194pre-push
 195~~~~~~~~
 196
 197This hook is called by 'git push' and can be used to prevent a push from taking
 198place.  The hook is called with two parameters which provide the name and
 199location of the destination remote, if a named remote is not being used both
 200values will be the same.
 201
 202Information about what is to be pushed is provided on the hook's standard
 203input with lines of the form:
 204
 205  <local ref> SP <local sha1> SP <remote ref> SP <remote sha1> LF
 206
 207For instance, if the command +git push origin master:foreign+ were run the
 208hook would receive a line like the following:
 209
 210  refs/heads/master 67890 refs/heads/foreign 12345
 211
 212although the full, 40-character SHA-1s would be supplied.  If the foreign ref
 213does not yet exist the `<remote SHA-1>` will be 40 `0`.  If a ref is to be
 214deleted, the `<local ref>` will be supplied as `(delete)` and the `<local
 215SHA-1>` will be 40 `0`.  If the local commit was specified by something other
 216than a name which could be expanded (such as `HEAD~`, or a SHA-1) it will be
 217supplied as it was originally given.
 218
 219If this hook exits with a non-zero status, 'git push' will abort without
 220pushing anything.  Information about why the push is rejected may be sent
 221to the user by writing to standard error.
 222
 223[[pre-receive]]
 224pre-receive
 225~~~~~~~~~~~
 226
 227This hook is invoked by 'git-receive-pack' when it reacts to
 228'git push' and updates reference(s) in its repository.
 229Just before starting to update refs on the remote repository, the
 230pre-receive hook is invoked.  Its exit status determines the success
 231or failure of the update.
 232
 233This hook executes once for the receive operation. It takes no
 234arguments, but for each ref to be updated it receives on standard
 235input a line of the format:
 236
 237  <old-value> SP <new-value> SP <ref-name> LF
 238
 239where `<old-value>` is the old object name stored in the ref,
 240`<new-value>` is the new object name to be stored in the ref and
 241`<ref-name>` is the full name of the ref.
 242When creating a new ref, `<old-value>` is 40 `0`.
 243
 244If the hook exits with non-zero status, none of the refs will be
 245updated. If the hook exits with zero, updating of individual refs can
 246still be prevented by the <<update,'update'>> hook.
 247
 248Both standard output and standard error output are forwarded to
 249'git send-pack' on the other end, so you can simply `echo` messages
 250for the user.
 251
 252The number of push options given on the command line of
 253`git push --push-option=...` can be read from the environment
 254variable `GIT_PUSH_OPTION_COUNT`, and the options themselves are
 255found in `GIT_PUSH_OPTION_0`, `GIT_PUSH_OPTION_1`,...
 256If it is negotiated to not use the push options phase, the
 257environment variables will not be set. If the client selects
 258to use push options, but doesn't transmit any, the count variable
 259will be set to zero, `GIT_PUSH_OPTION_COUNT=0`.
 260
 261See the section on "Quarantine Environment" in
 262linkgit:git-receive-pack[1] for some caveats.
 263
 264[[update]]
 265update
 266~~~~~~
 267
 268This hook is invoked by 'git-receive-pack' when it reacts to
 269'git push' and updates reference(s) in its repository.
 270Just before updating the ref on the remote repository, the update hook
 271is invoked.  Its exit status determines the success or failure of
 272the ref update.
 273
 274The hook executes once for each ref to be updated, and takes
 275three parameters:
 276
 277 - the name of the ref being updated,
 278 - the old object name stored in the ref,
 279 - and the new object name to be stored in the ref.
 280
 281A zero exit from the update hook allows the ref to be updated.
 282Exiting with a non-zero status prevents 'git-receive-pack'
 283from updating that ref.
 284
 285This hook can be used to prevent 'forced' update on certain refs by
 286making sure that the object name is a commit object that is a
 287descendant of the commit object named by the old object name.
 288That is, to enforce a "fast-forward only" policy.
 289
 290It could also be used to log the old..new status.  However, it
 291does not know the entire set of branches, so it would end up
 292firing one e-mail per ref when used naively, though.  The
 293<<post-receive,'post-receive'>> hook is more suited to that.
 294
 295In an environment that restricts the users' access only to git
 296commands over the wire, this hook can be used to implement access
 297control without relying on filesystem ownership and group
 298membership. See linkgit:git-shell[1] for how you might use the login
 299shell to restrict the user's access to only git commands.
 300
 301Both standard output and standard error output are forwarded to
 302'git send-pack' on the other end, so you can simply `echo` messages
 303for the user.
 304
 305The default 'update' hook, when enabled--and with
 306`hooks.allowunannotated` config option unset or set to false--prevents
 307unannotated tags to be pushed.
 308
 309[[post-receive]]
 310post-receive
 311~~~~~~~~~~~~
 312
 313This hook is invoked by 'git-receive-pack' when it reacts to
 314'git push' and updates reference(s) in its repository.
 315It executes on the remote repository once after all the refs have
 316been updated.
 317
 318This hook executes once for the receive operation.  It takes no
 319arguments, but gets the same information as the
 320<<pre-receive,'pre-receive'>>
 321hook does on its standard input.
 322
 323This hook does not affect the outcome of 'git-receive-pack', as it
 324is called after the real work is done.
 325
 326This supersedes the <<post-update,'post-update'>> hook in that it gets
 327both old and new values of all the refs in addition to their
 328names.
 329
 330Both standard output and standard error output are forwarded to
 331'git send-pack' on the other end, so you can simply `echo` messages
 332for the user.
 333
 334The default 'post-receive' hook is empty, but there is
 335a sample script `post-receive-email` provided in the `contrib/hooks`
 336directory in Git distribution, which implements sending commit
 337emails.
 338
 339The number of push options given on the command line of
 340`git push --push-option=...` can be read from the environment
 341variable `GIT_PUSH_OPTION_COUNT`, and the options themselves are
 342found in `GIT_PUSH_OPTION_0`, `GIT_PUSH_OPTION_1`,...
 343If it is negotiated to not use the push options phase, the
 344environment variables will not be set. If the client selects
 345to use push options, but doesn't transmit any, the count variable
 346will be set to zero, `GIT_PUSH_OPTION_COUNT=0`.
 347
 348[[post-update]]
 349post-update
 350~~~~~~~~~~~
 351
 352This hook is invoked by 'git-receive-pack' when it reacts to
 353'git push' and updates reference(s) in its repository.
 354It executes on the remote repository once after all the refs have
 355been updated.
 356
 357It takes a variable number of parameters, each of which is the
 358name of ref that was actually updated.
 359
 360This hook is meant primarily for notification, and cannot affect
 361the outcome of 'git-receive-pack'.
 362
 363The 'post-update' hook can tell what are the heads that were pushed,
 364but it does not know what their original and updated values are,
 365so it is a poor place to do log old..new. The
 366<<post-receive,'post-receive'>> hook does get both original and
 367updated values of the refs. You might consider it instead if you need
 368them.
 369
 370When enabled, the default 'post-update' hook runs
 371'git update-server-info' to keep the information used by dumb
 372transports (e.g., HTTP) up to date.  If you are publishing
 373a Git repository that is accessible via HTTP, you should
 374probably enable this hook.
 375
 376Both standard output and standard error output are forwarded to
 377'git send-pack' on the other end, so you can simply `echo` messages
 378for the user.
 379
 380push-to-checkout
 381~~~~~~~~~~~~~~~~
 382
 383This hook is invoked by 'git-receive-pack' when it reacts to
 384'git push' and updates reference(s) in its repository, and when
 385the push tries to update the branch that is currently checked out
 386and the `receive.denyCurrentBranch` configuration variable is set to
 387`updateInstead`.  Such a push by default is refused if the working
 388tree and the index of the remote repository has any difference from
 389the currently checked out commit; when both the working tree and the
 390index match the current commit, they are updated to match the newly
 391pushed tip of the branch.  This hook is to be used to override the
 392default behaviour.
 393
 394The hook receives the commit with which the tip of the current
 395branch is going to be updated.  It can exit with a non-zero status
 396to refuse the push (when it does so, it must not modify the index or
 397the working tree).  Or it can make any necessary changes to the
 398working tree and to the index to bring them to the desired state
 399when the tip of the current branch is updated to the new commit, and
 400exit with a zero status.
 401
 402For example, the hook can simply run `git read-tree -u -m HEAD "$1"`
 403in order to emulate 'git fetch' that is run in the reverse direction
 404with `git push`, as the two-tree form of `read-tree -u -m` is
 405essentially the same as `git checkout` that switches branches while
 406keeping the local changes in the working tree that do not interfere
 407with the difference between the branches.
 408
 409
 410pre-auto-gc
 411~~~~~~~~~~~
 412
 413This hook is invoked by 'git gc --auto'. It takes no parameter, and
 414exiting with non-zero status from this script causes the 'git gc --auto'
 415to abort.
 416
 417post-rewrite
 418~~~~~~~~~~~~
 419
 420This hook is invoked by commands that rewrite commits (`git commit
 421--amend`, 'git-rebase'; currently 'git-filter-branch' does 'not' call
 422it!).  Its first argument denotes the command it was invoked by:
 423currently one of `amend` or `rebase`.  Further command-dependent
 424arguments may be passed in the future.
 425
 426The hook receives a list of the rewritten commits on stdin, in the
 427format
 428
 429  <old-sha1> SP <new-sha1> [ SP <extra-info> ] LF
 430
 431The 'extra-info' is again command-dependent.  If it is empty, the
 432preceding SP is also omitted.  Currently, no commands pass any
 433'extra-info'.
 434
 435The hook always runs after the automatic note copying (see
 436"notes.rewrite.<command>" in linkgit:git-config[1]) has happened, and
 437thus has access to these notes.
 438
 439The following command-specific comments apply:
 440
 441rebase::
 442        For the 'squash' and 'fixup' operation, all commits that were
 443        squashed are listed as being rewritten to the squashed commit.
 444        This means that there will be several lines sharing the same
 445        'new-sha1'.
 446+
 447The commits are guaranteed to be listed in the order that they were
 448processed by rebase.
 449
 450sendemail-validate
 451~~~~~~~~~~~~~~~~~~
 452
 453This hook is invoked by 'git send-email'.  It takes a single parameter,
 454the name of the file that holds the e-mail to be sent.  Exiting with a
 455non-zero status causes 'git send-email' to abort before sending any
 456e-mails.
 457
 458fsmonitor-watchman
 459~~~~~~~~~~~~~~~~~~
 460
 461This hook is invoked when the configuration option core.fsmonitor is
 462set to .git/hooks/fsmonitor-watchman.  It takes two arguments, a version
 463(currently 1) and the time in elapsed nanoseconds since midnight,
 464January 1, 1970.
 465
 466The hook should output to stdout the list of all files in the working
 467directory that may have changed since the requested time.  The logic
 468should be inclusive so that it does not miss any potential changes.
 469The paths should be relative to the root of the working directory
 470and be separated by a single NUL.
 471
 472It is OK to include files which have not actually changed.  All changes
 473including newly-created and deleted files should be included. When
 474files are renamed, both the old and the new name should be included.
 475
 476Git will limit what files it checks for changes as well as which
 477directories are checked for untracked files based on the path names
 478given.
 479
 480An optimized way to tell git "all files have changed" is to return
 481the filename '/'.
 482
 483The exit status determines whether git will use the data from the
 484hook to limit its search.  On error, it will fall back to verifying
 485all files and folders.
 486
 487GIT
 488---
 489Part of the linkgit:git[1] suite