fix(hooks): strip any host prefix from repository, not just github:

Repository values use a `<host>:` prefix convention (e.g. github:,
gitlab:, etc). Use `/^[^:]+:/` to strip any prefix rather than
hardcoding `github:`.

Author: jdalton

.claude/hooks/setup-security-tools/index.mts

@@ -127,7 +127,7 @@ async function setupZizmor(): Promise<boolean> {
     throw new Error(`Unsupported platform: ${platformKey}`)
   }
   const { asset, sha256: expectedSha } = platformEntry
-  const repo = ZIZMOR.repository?.replace(/^github:/, '') ?? ''
+  const repo = ZIZMOR.repository?.replace(/^[^:]+:/, '') ?? ''
   const url = `https://github.com/${repo}/releases/download/v${ZIZMOR.version}/${asset}`
 
   logger.log(`Downloading zizmor v${ZIZMOR.version} (${asset})...`)
@@ -184,7 +184,7 @@ async function setupSfw(apiKey: string | undefined): Promise<boolean> {
 
   // Checksum + asset.
   const { asset, sha256 } = platformEntry
-  const repo = sfwConfig.repository?.replace(/^github:/, '') ?? ''
+  const repo = sfwConfig.repository?.replace(/^[^:]+:/, '') ?? ''
   const url = `https://github.com/${repo}/releases/download/${sfwConfig.version}/${asset}`
   const binaryName = isEnterprise ? 'sfw' : 'sfw-free'
 

.claude/hooks/setup-security-tools/update.mts

@@ -146,7 +146,7 @@ async function updateZizmor(config: Config): Promise<UpdateResult> {
     return { tool, skipped: true, updated: false, reason: 'not in config' }
   }
 
-  const repo = toolConfig.repository?.replace(/^github:/, '') ?? 'zizmorcore/zizmor'
+  const repo = toolConfig.repository?.replace(/^[^:]+:/, '') ?? 'zizmorcore/zizmor'
 
   let release: GhRelease
   try {
@@ -265,7 +265,7 @@ async function updateSfwTool(
     return { tool: toolName, skipped: true, updated: false, reason: 'not in config' }
   }
 
-  const repo = toolConfig.repository?.replace(/^github:/, '')
+  const repo = toolConfig.repository?.replace(/^[^:]+:/, '')
   if (!repo) {
     return { tool: toolName, skipped: true, updated: false, reason: 'no repository' }
   }