diff --git a/.bin/.gitignore b/.bin/.gitignore
new file mode 100644
index 0000000..30e8834
--- /dev/null
+++ b/.bin/.gitignore
@@ -0,0 +1 @@
+host-mode
diff --git a/.bin/pre-commit-yadm b/.bin/pre-commit-yadm
new file mode 100755
index 0000000..a54b859
--- /dev/null
+++ b/.bin/pre-commit-yadm
@@ -0,0 +1,4 @@
+#!/usr/bin/env sh
+
+export GIT_DIR="$HOME/.local/share/yadm/repo.git"
+pre-commit $@ -c .config/pre-commit-config.yaml
diff --git a/.config/pre-commit-config.yaml b/.config/pre-commit-config.yaml
new file mode 100644
index 0000000..ca511d2
--- /dev/null
+++ b/.config/pre-commit-config.yaml
@@ -0,0 +1,5 @@
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.20.1
+    hooks:
+      - id: gitleaks