SCAN4NET-967 Add .pre-commit-config.yaml (#2882)

Co-authored-by: Martin Strecker <103252490+martin-strecker-sonarsource@users.noreply.github.com>

Author: Tim-Pohlmann

.pre-commit-config.yaml

@@ -0,0 +1,7 @@
+default_install_hook_types: [pre-push]
+repos:
+-   repo: https://github.com/SonarSource/sonar-secrets-pre-commit
+    rev: v2.30.0.8284
+    hooks:
+    -   id: sonar-secrets
+        stages: [pre-push]

CONTRIBUTING.md

@@ -68,3 +68,8 @@ In our CI/CD pipeline, we use the following:
 - SONARCLOUD_PROJECT_TOKEN=[user-token]
 
 These can be set either on the operating system or your preferred IDE test run configuration.
+
+## `sonar-secrets-pre-commit` hook
+
+If you are Sonar internal use `sonar-secrets-pre-commit` to prevent pushing secrets to the repository. The hook is configured in [.pre-commit-hooks.yaml](.pre-commit-hooks.yaml). Follow the instructions in the [`sonar-secrets-pre-commit` README](https://github.com/SonarSource/sonar-secrets-pre-commit?tab=readme-ov-file) to activate it.
+Despite its name, the secrets check is configured as a pre-push hook.