thoughtworks / talisman

Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.
https://thoughtworks.github.io/talisman/
MIT License
1.89k stars 241 forks source link

Support installing/using Talisman through build tools/package managers #362

Open josephearl opened 2 years ago

josephearl commented 2 years ago

Is your feature request related to a problem? Please describe.

It is annoying to have to manually install Talisman or ask users to install Talisman. Projects should be self-contained if possible and not rely on globally installed tools.

Allowing people to install and use Talisman as part of their normal project setup would help ensure Talisman is used by making the process seamless and frictionless.

Describe the solution you'd like

An NPM package for Talisman. A Maven package for Talisman, or plugins for Maven & Gradle for Talisman.

This means for example a Node.js project can completely managed through the package.json by adding a dependency on Talisman and using e.g. Husky to manage git hooks. When a user runs npm install Talisman will be installed and available for use with the pre-commit hooks.

Describe alternatives you've considered

For some build tools like Gradle you can write custom tasks that download files or execute tools.

Additional context