The latest articles on DEV Community by Phùng Bá Luân (@luanphungba). https://dev.to/luanphungba https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F336927%2Fd8d03280-b374-4abc-b518-a55e7945276f.png https://dev.to/luanphungba en Phùng Bá Luân Thu, 09 Jan 2025 03:19:32 +0000 https://dev.to/luanphungba/httpsdevtoluanphungbawhy-i-built-commit-ai-a-story-about-git-security-and-team-safety-1ejn-4hoh https://dev.to/luanphungba/httpsdevtoluanphungbawhy-i-built-commit-ai-a-story-about-git-security-and-team-safety-1ejn-4hoh Phùng Bá Luân Thu, 09 Jan 2025 03:16:47 +0000 https://dev.to/luanphungba/why-i-built-commit-ai-a-story-about-git-security-and-team-safety-1ejn https://dev.to/luanphungba/why-i-built-commit-ai-a-story-about-git-security-and-team-safety-1ejn <h1> Two Months Ago: A Costly Mistake </h1> <p>Two months ago, my friend made a mistake that many of us could easily make — he accidentally pushed AWS credentials to GitHub in a public repository. Within hours, his AWS account was compromised, leading to unauthorized usage and a significant bill. This incident made me realize we needed better safeguards.</p> <h2> Introducing commit-ai </h2> <p>To prevent such incidents, I created <strong>commit-ai</strong>, a simple CLI tool designed to be your last line of defense against accidental credential exposure.</p> <h3> What is commit-ai? </h3> <p>commit-ai leverages GPT-4 to:</p> <ol> <li> <strong>Scan your changes</strong> for sensitive information before committing. </li> <li> <strong>Generate meaningful commit messages.</strong> </li> <li> <strong>Provide quick code reviews.</strong> </li> </ol> <h3> How It Works </h3> <p>When you run commit-ai, it:</p> <ul> <li> <strong>Analyzes your git diff</strong> for changes. </li> <li> <strong>Checks for sensitive data</strong> like API keys, tokens, and credentials. </li> <li> <strong>Blocks commits</strong> if anything suspicious is detected. </li> <li> <strong>Generates a conventional commit message</strong> summarizing your changes. </li> </ul> <h2> Why I Need Your Help </h2> <p>I built commit-ai to make development safer for everyone. It’s open source because I want it to grow with real-world use cases and feedback from developers like you.</p> <h3> If You Find It Useful: </h3> <ul> <li>Try it out. </li> <li>Share your feedback. </li> <li>Consider starring the repository. </li> <li>Share it with your team. </li> <li>Contribute to the source code</li> </ul> <h2> What’s Next? </h2> <p>I’m actively working on:</p> <ul> <li>Supporting different commit message formats. </li> <li>Adding more security checks. </li> <li>Enhancing code review capabilities. </li> </ul> <h2> Installation </h2> <p>Get started by visiting the GitHub repository:<br><br> 👉 <a href="https://github.com/luanphungba/git-commit-ai" rel="noopener noreferrer">GitHub: commit-ai</a></p> git development github commit