Talisman

Free plan LinuxMacWindows

What Talisman is

Talisman is an open-source tool from ThoughtWorks that checks Git changes for possible secrets. It installs hooks that run before a commit or push, so checks can happen as changes leave a developer’s workstation. It can also run as a standalone executable. Its detectors examine encoded values, file contents and sizes, high-entropy content, possible credit card numbers, and filenames or extensions. When it finds a potential issue, it reports the affected file and the errors.

The command-line tool can scan Git history for secrets that may already have been checked in and save report files. A `.talismanrc` configuration file lets teams list ignored files, allow patterns, add custom search patterns, and adjust detector severity. Talisman can be installed as a global Git hook template and CLI utility, configured as a hook for one repository, or used on its own. Its documentation describes use with the pre-commit framework and Husky, and lists Linux, macOS, and Windows support. The project is distributed under the MIT license and provides GitHub issues for problems or ideas, as well as contribution guidelines. Talisman’s documented limitation is that it cannot detect secrets introduced through a forced push. Its interactive mode for adding files to the ignore configuration is available only on non-Windows systems.

Who it suits

Talisman suits developers and teams using Git who want secret checks before commits or pushes, or scans of repository history. Its configuration options and documented use with pre-commit and Husky may also suit teams that want to tailor detection rules or incorporate checks into their workflow.

What it does well

Free to use under the MIT license.
Runs as a pre-commit hook, pre-push hook, or standalone executable.
Scans Git history and can save report files.
Supports custom patterns, ignored files, and detector severity settings.
Available for Linux, macOS, and Windows.

What to know first

Cannot detect secrets introduced through a forced push.
Interactive ignore configuration is available only to non-Windows users.

Limits

Talisman cannot detect secrets introduced through a forced push. Its interactive mode for adding files to the ignore configuration is available only to non-Windows users.

Plans

Plan	Billed and limits	Price
Talisman	MIT licensed · pre-commit/pre-push hooks · repository scanning	Free

As thoughtworks.github.io lists them, read 4 Oct 2026. The maker's own page has the final word.

Getting started

Visit the Talisman project website.
Choose an installation route: global Git hook template and CLI utility, a hook for one repository, or the standalone executable.
Configure Talisman as a pre-commit or pre-push Git hook, if desired.
Set ignored files, allowed patterns, custom search patterns, or detector severity in `.talismanrc`.
Use the documented pre-commit framework or Husky integration if it fits your workflow.

Verdict

Choose Talisman if you want a free Git tool for checking changes before commits or pushes, with configurable detection and history scanning. Look elsewhere if you need detection for secrets introduced through forced pushes or Windows support for its interactive ignore configuration.

Questions

Is Talisman free?

Yes. The listed plan is free, and the project is distributed under the MIT license.

Which operating systems does Talisman support?

The documentation lists Linux, macOS, and Windows.

Does Talisman scan repository history?

Yes. Its CLI can scan Git history for potential secrets and save report files.

Can I configure custom detection rules?

Yes. A `.talismanrc` file supports custom search patterns, allowed patterns, ignored files, and detector severity settings.

Which Git hook modes are supported?

Talisman can run as a pre-commit or pre-push hook, or as a standalone executable.

What is a known detection limitation?

Talisman cannot detect secrets introduced through a forced push.

Facts from Talisman's own pages

Configuration: A .talismanrc file supports ignored files, allowed patterns, custom search patterns, and detector severity settings. · github.com, 4 Oct 2026
Detection checks: Documented detectors check encoded values, file contents, file size, entropy, possible credit card numbers, and filenames or extensions. · github.com, 4 Oct 2026
History scanning: Talisman can scan repository history to detect secrets that have already been checked in. · thoughtworks.github.io, 4 Oct 2026
Hook modes: Talisman can be configured as a pre-commit or pre-push Git hook. · thoughtworks.github.io, 4 Oct 2026
Hook options: Talisman can run as a pre-commit or pre-push hook, or as a standalone executable. · github.com, 4 Oct 2026
Install options: Installation options include a global Git hook template and CLI utility, a hook for one repository, or a standalone executable. · github.com, 4 Oct 2026
Integrations: The documentation describes using Talisman with the pre-commit framework and Husky. · github.com, 4 Oct 2026
Interactive mode limitation: Interactive mode for adding files to the ignore configuration is documented as available only to non-Windows users. · github.com, 4 Oct 2026
Known limitation: Talisman’s installation documentation says it cannot detect secrets introduced through a forced push. · thoughtworks.github.io, 4 Oct 2026
License: The documentation says Talisman is distributed under the MIT license. · thoughtworks.github.io, 4 Oct 2026
Notable limitation: Talisman’s documentation says it cannot detect secrets introduced through a forced push. · github.com, 4 Oct 2026
Platform support: The documentation lists support for macOS, Linux, and Windows. · thoughtworks.github.io, 4 Oct 2026
Project origin: The documentation identifies Talisman as an open-source project created by ThoughtWorks. · thoughtworks.github.io, 4 Oct 2026
Purpose: Talisman installs Git hooks that check outgoing changes for potential secrets before they leave a developer’s workstation. · thoughtworks.github.io, 4 Oct 2026
Reporting: When checks detect a potential issue, Talisman displays a report describing the affected file and errors. · github.com, 4 Oct 2026
Repository scanning: The CLI can scan Git history for potential secrets and save report files. · github.com, 4 Oct 2026
Secret detection: Its detectors check encoded values, file contents, file sizes, high-entropy content, possible credit card numbers, and filenames. · github.com, 4 Oct 2026
Support and contributions: The project directs users to GitHub issues for problems or ideas and invites contributions through its contribution guidelines. · thoughtworks.github.io, 4 Oct 2026
Supported systems: Talisman supports macOS, Linux, and Windows. · thoughtworks.github.io, 4 Oct 2026

Where Talisman stands on Freedom251

Secrets Scanning Software#15 of 24