git pre-commit hook to make sure all files with a given filename are encrypted with ansible-vault

pre-commit

#!/bin/bash

encryptedIndicator="$ANSIBLE_VAULT"
encryptedFilename="encrypted.yml"

sbe=`find $PWD -name $encryptedFilename | sort -u`
encrypted=`find $PWD -name $encryptedFilename -exec grep "$encryptedIndicator" {} -l \;| sort -u`

shouldbe=`comm -3 <(printf '%s\n' "${sbe[@]}") <(printf '%s\n' "${encrypted[@]}")`

if [ ! -z "$shouldbe" -a "$shouldbe" != " " ]; then
    echo "Please check that the following files are properly encrypted"
    echo "'$shouldbe'"
    exit -1
fi