pre-commit security