chore: check if git-secrets already configured

Author: tstephen

.devcontainer/devcontainer.json

@@ -22,7 +22,7 @@
       "--network=host"
     ],
     "remoteEnv": { "LOCAL_WORKSPACE_FOLDER": "${localWorkspaceFolder}" },
-  "postAttachCommand": "git-secrets --register-aws; git-secrets --add-provider -- cat /usr/share/secrets-scanner/nhsd-rules-deny.txt",
+  "postCreateCommand": "bash .devcontainer/../scripts/install-git-secrets.sh",
     "features": {
     },
     "customizations": {

scripts/install-git-secrets.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+if ! git config --get-all secrets.patterns | grep -Fq AKIA; then
+  git-secrets --register-aws
+fi
+if ! git config --get-all secrets.providers | grep -Fxq "cat /usr/share/secrets-scanner/nhsd-rules-deny.txt"; then
+  git-secrets --add-provider -- cat /usr/share/secrets-scanner/nhsd-rules-deny.txt
+fi