ggshield — Install Hooks

Overview

ggshield install wires ggshield in as a hook so hardcoded secrets are caught before they leak. This is the prevention layer — the reactive skills (scan-secrets, scan-machine, check-hmsl) find secrets that already exist; this one stops new ones at the door.

It installs two distinct families of hook:

• Git hooks — pre-commit / pre-push. Catch a secret as it is committed or pushed and block the git operation, so it never enters history.
• AI-assistant hooks — claude-code, codex, copilot, cursor, vscode. Register ggshield inside an AI coding tool so it scans the tool's prompts, actions, and outputs in real time: it scans your prompt before it reaches the model, scans commands, file reads, and MCP calls before the agent runs them, and scans outputs — blocking the prompt or action when a secret is found.