talisman icon indicating copy to clipboard operation
talisman copied to clipboard

Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.

Results 79 talisman issues
Sort by recently updated
recently updated
newest added

**Is your feature request related to a problem? Please describe.** I want to be able to block PRs until new secrets are either marked as false-positive, or purged from the...

When trying to scan my current git repo, I get the following error ![image](https://github.com/thoughtworks/talisman/assets/124775516/4966e11f-d7d8-47d0-ae56-6eca25e8ca9c) Reproduction not possible, because coding is confidential. I expected the scan to run without issues, as...

Hello, Today while committing one of my files which is: **This is just an example file**: const `objec`t = { a = `paassword@123#$` b = `eyJvIjoiODA2MDkyIiwibiI6ImZ3ZGVtby1` } when I was...

**Describe the bug** The custom pattern can work for the file content but not for the file name. It appears that this app is able to detect filenames, such as...

**Describe the bug** The proposed `.talismanrc` format of a `--githook` report might contain checksums that have no effect when used in the `.talismanrc` file, so the same finding is reported...

Resolves #414 This PR adds the possibility to use `allowed_patterns` together with file path wildcards in the `fileignoreconfig`, while still allowing file specific checksum-based ignore configs - as printed by...

Resolves #416 With this PR the git additions used for the detection scan are also taken into account when reporting the checksum suggestions for the `.talismanrc` file. Because evaluation of...

**Describe the bug** Using `allowed_patterns` in the `fileignoreconfig` section does not work with file names/paths that contain wildcards. **To Reproduce** With `.talismanrc` config: ``` fileignoreconfig: - filename: 'sub-folder/*.css' ignore_detectors: [filecontent]...

**Describe the bug** Password secret not detected on commit when talisman was added as a pre-commit hook. **To Reproduce** Steps to reproduce the behaviour: 1. Add func("password', "asdfasdfa"); to some...

bug
critical