Install/remove a managed pre-commit hook that runs envo scan --staged.
pre-commit
envo scan --staged
.git/hooks/pre-commit