diff --git a/.husky/pre-commit b/.husky/pre-commit
index da3763f..a209c95 100755
--- a/.husky/pre-commit
+++ b/.husky/pre-commit
@@ -1,4 +1,14 @@
 #!/usr/bin/env sh
+# >>> GitGuardian secret scan (managed by Contentstack Security) >>>
+if [ -z "${CI:-}" ]; then
+  if ! command -v ggshield >/dev/null 2>&1; then
+    echo "ggshield is not installed - secret scanning is required. Setup: https://contentstack.atlassian.net/wiki/x/FIDVEwE" >&2
+    exit 1
+  fi
+  ggshield secret scan pre-commit || exit 1
+fi
+# <<< GitGuardian secret scan <<<
+
 # Pre-commit hook to run Talisman and Snyk scans, completing both before deciding to commit
 
 # Function to check if a command exists
diff --git a/.husky/pre-push b/.husky/pre-push
index 55ce37f..639ec39 100755
--- a/.husky/pre-push
+++ b/.husky/pre-push
@@ -1,4 +1,14 @@
 #!/usr/bin/env sh
+# >>> GitGuardian secret scan (managed by Contentstack Security) >>>
+if [ -z "${CI:-}" ]; then
+  if ! command -v ggshield >/dev/null 2>&1; then
+    echo "ggshield is not installed - secret scanning is required. Setup: https://contentstack.atlassian.net/wiki/x/FIDVEwE" >&2
+    exit 1
+  fi
+  ggshield secret scan pre-push "$@" || exit 1
+fi
+# <<< GitGuardian secret scan <<<
+
 
 echo "🚀 Running pre-push checks..."