# 使用 Homebrew, MacPorts, winget 安装 talisman

查看 talisman 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:talisman
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install talisman
```

  证据: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install talisman
```

  证据: MacPorts ports tree: devel/talisman/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Windows

- winget (92%):

```sh
winget install --id Thoughtworks.Talisman -e
```

  证据: Windows Package Manager source index: Thoughtworks.Talisman from https://cdn.winget.microsoft.com/cache/source.msix

## 软件包事实

- **软件包键:** brew:talisman
- **软件包管理器:** Homebrew
- **版本:** 1.37.0
- **来源摘要:** Tool to detect and prevent secrets from getting checked in
- **主页:** <https://thoughtworks.github.io/talisman/>
- **仓库:** <https://github.com/thoughtworks/talisman>
- **最后更新:** 2026-07-26T00:50:32+02:00
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- talisman (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 1.37.0
## 项目历史与用法

Talisman is a Thoughtworks-maintained secret-scanning CLI and Git-hook tool. It became package-manager relevant because it packages a common DevSecOps guardrail as a local binary that can run before code leaves a developer workstation.

### 项目历史

The official repository was initialized on 2015-12-14 and the first observed release tag, v0.1.0, is dated 2016-04-19. Its README defines the project as a tool that scans Git changesets so likely secrets or sensitive information do not leave the developer's workstation.

### 采用历史

Talisman is distributed as a standalone executable, as a repository Git hook, and as a global Git hook template. The official README documents Homebrew installation, release-page binaries, an install script, pre-commit integration, and Husky integration, which placed it in the same day-to-day tooling layer as linters and formatters.

### 使用方式

The standard usage is to install the `talisman` binary and invoke it from pre-commit or pre-push hooks. It checks outgoing changesets for patterns such as SSH keys, authorization tokens, and private keys; it can also run directly as a CLI utility for Git repository scanning.

### 为什么软件包爱好者会关心

Package nerds care about Talisman because it is a classic local-policy binary: small enough to install with Homebrew, easy to pin in hook frameworks, and useful before centralized secret-scanning infrastructure ever sees a commit. Its documented auto-update behavior from v0.4.4 also reflects the tension between reproducible pinned tooling and security tools that want to stay current.

### 时间线

- 2015-12-14: First commits in the official Git repository.
- 2016-04-19: First observed release tag, v0.1.0.
- 2018-10-08: v0.3.1 appears in the tag history before the README-documented v0.4.4 auto-update behavior.
- 2025-05-02: v1.37.0 appears as the latest observed tag and Homebrew stable version.

### Related projects

- Talisman is commonly used with Git hooks, pre-commit, and Husky. In package-manager culture it sits beside tools such as git-secrets and detect-secrets, though this record relies only on the official Talisman sources for claims.

### 来源

- <https://formulae.brew.sh/api/formula/talisman.json>
- <https://github.com/thoughtworks/talisman README>
- <https://github.com/thoughtworks/talisman official Git history and tags>


## 安全说明

narrow executable package without higher-risk signals.

- **Geiger 风险:** 绿色 / 低
- narrow executable package without higher-risk signals


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: .talismanrc
## 其他软件包管理器记录

- MacPorts - talisman: normalized package name match | MacPorts ports tree: devel/talisman/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- winget - Thoughtworks.Talisman: normalized package name match | Windows Package Manager source index: Thoughtworks.Talisman from https://cdn.winget.microsoft.com/cache/source.msix


## Combined YAML source

View the package source record on GitHub. [combined/talisman.yml](https://github.com/mxcl/pkgdb/blob/main/combined/talisman.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph