[rswail]

Sounds like you need a pre-commit hook to check.

[maccard]

Pre commit hooks aren’t enforcable. People need to opt in to them, and the people who opt in to them are the people who will check for passwords before they commit.

[n_plus_1_acc]

Server-side pre-recieve hooks are better