diff --git a/.envrc b/.envrc
index 6a113c523f379be3462ae08f6f396304543d308e..4f0af3a80ef9b7d25eaa8177ee64bcd7310af8b4 100644
--- a/.envrc
+++ b/.envrc
@@ -1,3 +1,5 @@
+#!/bin/sh
+
 if [ ! -f ".envrc.local" ]; then
   cp .envrc.local.template .envrc.local
   echo ".envrc.local was created from template, please add your credentials and customize to your environment"
@@ -6,3 +8,5 @@ fi
 # loads personal (secret) data from separate env file (not checked in)
 source_env_if_exists .envrc.local
 
+type yarn >/dev/null 2>&1 && PATH="$PATH:$(yarn global bin)"
+export PATH
\ No newline at end of file
diff --git a/.husky/pre-commit b/.husky/pre-commit
new file mode 100755
index 0000000000000000000000000000000000000000..c1d699695f34ed0a0d789b795412ef67013e7458
--- /dev/null
+++ b/.husky/pre-commit
@@ -0,0 +1,4 @@
+#!/bin/sh
+. "$(dirname "$0")/_/husky.sh"
+
+gitleaks protect --staged -v -c ../.gitleaks.toml