Fix shelldre:S7688 on hook-templates by replacing [] test command with [[]] (#47)

Author: jonas-wielage-sonarsource

src/bootstrap/hook-templates.ts

@@ -38,23 +38,23 @@ stdin_data=$(cat)
 # Extract tool_name and file_path using sed (no jq dependency)
 tool_name=$(echo "$stdin_data" | sed -n 's/.*"tool_name":"\([^"]*\)".*/\1/p' | head -1)
 
-if [ "$tool_name" != "Read" ]; then
+if [[ "$tool_name" != "Read" ]]; then
   exit 0
 fi
 
 # Extract file_path from tool_input
 file_path=$(echo "$stdin_data" | sed -n 's/.*"tool_input":\s*{\([^}]*\)}.*/\1/p' | \
   sed -n 's/.*"file_path":"\([^"]*\)".*/\1/p' | head -1)
 
-if [ -z "$file_path" ] || [ ! -f "$file_path" ]; then
+if [[ -z "$file_path" ]] || [[ ! -f "$file_path" ]]; then
   exit 0
 fi
 
 # Scan file for secrets
 sonar analyze --file "$file_path" > /dev/null 2>&1
 exit_code=$?
 
-if [ $exit_code -eq 51 ]; then
+if [[ $exit_code -eq 51 ]]; then
   # Secrets found - deny file read
   reason="Sonar detected secrets in file: $file_path"
   echo "{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"deny\",\"permissionDecisionReason\":\"$reason\"}}"
@@ -131,7 +131,7 @@ stdin_data=$(cat)
 # Extract prompt field using sed
 prompt=$(echo "$stdin_data" | sed -n 's/.*"prompt":"\([^"]*\)".*/\1/p' | head -1)
 
-if [ -z "$prompt" ]; then
+if [[ -z "$prompt" ]]; then
   exit 0
 fi
 
@@ -145,7 +145,7 @@ echo -n "$prompt" > "$temp_file"
 sonar analyze --file "$temp_file" > /dev/null 2>&1
 exit_code=$?
 
-if [ $exit_code -eq 51 ]; then
+if [[ $exit_code -eq 51 ]]; then
   # Secrets found - block prompt
   reason="Sonar detected secrets in prompt"
   echo "{\"decision\":\"block\",\"reason\":\"$reason\"}"