chore: prevent pushing to master with push hook (#46413)

.pre-commit-config.yaml

@@ -60,6 +60,13 @@ repos:
       require_serial: true
       additional_dependencies: [ "pyright@1.1.186" ]
       args: [ '--project', 'pyrightconfig-commithook.json' ]
+    - id: prevent-push
+      name: prevent pushing master
+      stages: [push]
+      entry: bash -c 'test "$PRE_COMMIT_REMOTE_BRANCH" != "refs/heads/master"'
+      always_run: true
+      pass_filenames: false
+      language: system
 
 -   repo: https://github.com/python-jsonschema/check-jsonschema
     rev: 0.21.0

scripts/lib.sh

@@ -126,7 +126,7 @@ setup-git() {
     if ! require pre-commit; then
         pip-install -r requirements-dev.txt
     fi
-    pre-commit install --install-hooks
+    pre-commit install --install-hooks --hook-type pre-commit --hook-type pre-push
     echo ""
 }