Skip to content
SPECIFICTION
Get listed

Talisman

thoughtworks.github.io

Free plan WindowsmacOSLinux
Visit thoughtworks.github.io
Spec score 7.7 #15 of 24 in Secrets Scanning Software

What it is

Talisman is a free, open-source Git tool from ThoughtWorks that installs hooks to check outgoing changes for potential secrets before they leave a workstation. It runs as a pre-commit hook, pre-push hook, or standalone executable, with installation options for a global Git hook template, one repository, or the CLI. Detectors inspect encoded values, file contents, file sizes, high-entropy data, possible credit-card numbers, and filenames or extensions. The CLI can scan Git history for secrets that may already be committed and save reports. A .talismanrc file supports ignored files, allowed patterns, custom search patterns, and detector severity settings. Documentation describes integration with the pre-commit framework and Husky, and lists macOS, Linux, and Windows support. When a check finds a possible issue, Talisman reports the affected file and errors. It is MIT licensed and can be used in CI/CD. Documentation notes that forced-push secrets cannot be detected, and interactive ignore-file configuration is available only to non-Windows users.

Spec sheet

Purpose
Talisman installs Git hooks that check outgoing changes for potential secrets before they leave a developer’s workstation.Read 4 Oct 2026 · thoughtworks.github.io
Integrations
The documentation describes using Talisman with the pre-commit framework and Husky.Read 4 Oct 2026 · github.com
License
The documentation says Talisman is distributed under the MIT license.Read 4 Oct 2026 · thoughtworks.github.io
Configuration
A .talismanrc file supports ignored files, allowed patterns, custom search patterns, and detector severity settings.Read 4 Oct 2026 · github.com
Detection checks
Documented detectors check encoded values, file contents, file size, entropy, possible credit card numbers, and filenames or extensions.Read 4 Oct 2026 · github.com
History scanning
Talisman can scan repository history to detect secrets that have already been checked in.Read 4 Oct 2026 · thoughtworks.github.io
Hook modes
Talisman can be configured as a pre-commit or pre-push Git hook.Read 4 Oct 2026 · thoughtworks.github.io
Hook options
Talisman can run as a pre-commit or pre-push hook, or as a standalone executable.Read 4 Oct 2026 · github.com
Install options
Installation options include a global Git hook template and CLI utility, a hook for one repository, or a standalone executable.Read 4 Oct 2026 · github.com
Interactive mode limitation
Interactive mode for adding files to the ignore configuration is documented as available only to non-Windows users.Read 4 Oct 2026 · github.com
Known limitation
Talisman’s installation documentation says it cannot detect secrets introduced through a forced push.Read 4 Oct 2026 · thoughtworks.github.io
Notable limitation
Talisman’s documentation says it cannot detect secrets introduced through a forced push.Read 4 Oct 2026 · github.com
Platform support
The documentation lists support for macOS, Linux, and Windows.Read 4 Oct 2026 · thoughtworks.github.io
Project origin
The documentation identifies Talisman as an open-source project created by ThoughtWorks.Read 4 Oct 2026 · thoughtworks.github.io
Reporting
When checks detect a potential issue, Talisman displays a report describing the affected file and errors.Read 4 Oct 2026 · github.com
Repository scanning
The CLI can scan Git history for potential secrets and save report files.Read 4 Oct 2026 · github.com
Secret detection
Its detectors check encoded values, file contents, file sizes, high-entropy content, possible credit card numbers, and filenames.Read 4 Oct 2026 · github.com
Support and contributions
The project directs users to GitHub issues for problems or ideas and invites contributions through its contribution guidelines.Read 4 Oct 2026 · thoughtworks.github.io
Supported systems
Talisman supports macOS, Linux, and Windows.Read 4 Oct 2026 · thoughtworks.github.io

Plans and prices

Talisman Free MIT licensed · pre-commit/pre-push hooks · repository scanning Read 4 Oct 2026 · thoughtworks.github.io

Every Talisman plan and price →

Strong points and limits

Strong points

  • Free MIT-licensed project
  • Pre-commit and pre-push hooks
  • Git history scanning
  • Custom detection and severity settings
  • macOS, Linux, and Windows support

Limits

  • Cannot detect secrets introduced through forced pushes
  • Interactive ignore configuration excludes Windows
  • Requires Git hook or CLI setup

Who it suits

It suits Git users who want secret checks before commits or pushes, in local workflows or CI/CD. It also fits teams needing configurable detectors and history scanning across macOS, Linux, or Windows.

Verdict

Talisman offers configurable secret detection at commit, push, and history-scanning stages. Account for its forced-push blind spot and Windows interactive-mode limitation.

Where Specifiction places it

Alternatives to TalismanAll alternatives →