I got tired of reviewing PRs that contained leaked API keys or debug console.log statements, so I built a small CLI tool to catch them at the source (the developer's terminal).
It's called Accord. It wraps standard Git Hooks but makes them zero-config.
How it works:
Run npx accord-governance-cli init in your repo.
It installs Husky and sets up a pre-commit hook automatically.
It scans staged files for regex patterns (AWS keys, logs, etc.).
It blocks the commit if it finds a "critical" violation.
You can configure it with a simple accord.yaml file to change rules from "block" to "warn" (e.g. allow console logs but warn about them).
It runs entirely locally. I'm working on a team dashboard for analytics next, but for now, it's just a simple tool to keep your git history clean.
I'd love to hear what other checks you'd want in a tool like this.
Docs/Install: npx accord-governance-cli init