talisman
husky
Our great sponsors
| talisman | husky | |
|---|---|---|
| 5 | 3 | |
| 1,836 | 151 | |
| 1.3% | 4.6% | |
| 6.8 | 0.0 | |
| 19 days ago | over 1 year ago | |
| Go | Go | |
| MIT License | GNU Affero General Public License v3.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
talisman
-
Detecting Secrets in Git Repositories
It's been a while since I looked, but pre-commit hooks (like talisman) would be the only way to prevent secrets from being committed/pushed. Server-side hooks are generally not supported on hosted repos (e.g. github, azure devops) since it's basically arbitrary code execution from the host's perspective.
-
Where have you had secrets leaked?
Isn't scanning for commits that contain secrets the better way? Best on server so secrets can't be pushed. Something like https://github.com/thoughtworks/talisman
- git push
-
GitHub Access Token Exposure
https://thoughtworks.github.io/talisman/
- 关于所谓密钥泄露，是否可以使用“先审后发”的方式避免？
husky
- Husky on steroids with golang
-
Get Started with Husky for go
Well, hooks seem great and all but how do I use them? You can use them the complicated way with the tools git provides out of the box, or you can use a package like husky to let it do all the complicated work for you.
What are some alternatives?
trufflehog - Find and verify secrets
lefthook - Fast and powerful Git hooks manager for any type of projects.
git-secrets - Prevents you from committing secrets and credentials into git repositories
gitleaks - Protect and discover secrets using Gitleaks 🔑
Husky.Net - Git hooks made easy with Husky.Net internal task runner! 🐶 It brings the dev-dependency concept to the .NET world!
captain-githook - git hook utility for Go codebases
ggshield - Find and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.
shutdown - Golang app shutdown hooks.
detect-secrets - An enterprise friendly way of detecting and preventing secrets in code.
simple-git-hooks - A simple git hooks manager for small projects
FoundryVTT-ICRPG - Index Card RPG (ICRPG) System for Foundry Virtual Tabletop (Foundry VTT) to allow easy creation and management of ICRPG character sheets, NPC sheets and items.
foundryvtt-minuit - Foundry VTT game system for the french RPG "Contes de Minuit"