Talisman Versions Save

Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.

scanwithrc

3 years ago

v1.10.0

3 years ago
  • A CLI flag to make talisman scan only HEAD (latest commit on branch), thanks to @louiedp3
  • A progress bar to display scanning progress, thanks to @dineshba
  • Changes to priority of some default search patterns, thanks to @tinamthomas
  • Clojure keyword additions, thanks to @ravik-karn

v1.9.0

3 years ago
  • Disabled interactive mode for pre-push hook
  • Fix for issue where talismanrc ignore directives are not processed by talisman on git-bash for windows, thanks to @dcRUSTy
  • Fix to talisman hook script to process TALISMAN_INTERACTIVE and TALISMAN_DEBUG env flags only when set to true

v1.8.0

3 years ago

Thanks to @dcRUSTy for setting up upx + lzma compression in CI

v1.7.0

3 years ago

Interactive mode for talisman will only work on non-windows machines. This is till we figure out a way to make it work with gitbash and/or powershell.

v1.6.0

3 years ago

v1.5.0

3 years ago

v1.4.0

3 years ago
  • Ability to set Base64Entropy threshold in .talismanrc, thanks to @michaellihs
  • Users now have a choice to install talisman hook in interactive mode (instead of having to set the mode manually before invocation), thanks to @harinee
  • Threshold values for various scan matches and ability to configure threshold in .talismanrc, thanks to @tinamthomas (@tt-official ?)
  • .talismanrc now supports allowed patterns at file and repo level to prevent false positives, thanks to @steeve85
  • Fix for an RCE exploit/vulnerability issue raised by @dcRUSTy on windows, thanks to @dineshba and @prabhu43

v1.3.0

4 years ago
  • Code Refactorings: Grouped detectors using package (#197)
  • Add some spacing and filename in prompt in interactive mode (#194)
  • Allow usage of wildcards in talismarc file (#196)
  • Code cleanup (#193)
  • Issue #185:Changed the pattern checking for passwords to verify strings succeeding the password phrase. *
  • Detect more sensitive phrases (#188)

v1.2.0

4 years ago