Merge gate : cinq contrôles gratuits avant de fusionner du code d'IA
Five open tools wired at commit time: gitleaks for secrets, knip for dead code, jscpd for copy-paste, osv-scanner for vulnerable dependencies, lefthook to run them all. Example from the [source video](https://www.instagram.com/reel/DfNU_Z9gk5b/) (an example, not a benchmark): on a demo repo with a fake token, 1 leak, 3 dead code findings, 8 duplicated lines and 6 known vulnerabilities in lodash 4.17.15 blocked the commit.