Integrate Talisman for pre-push token scanning

[connor-baer]

Suggested feature

Integrate ThoughtWorks Talisman tool which detects and prevents secrets from getting checked into version control:

By hooking into the pre-push hook provided by Git, Talisman validates the outgoing changeset for things that look suspicious - such as authorization tokens and private keys.

This prevents sensitive data from leaking which is a severe security risk. Andrzej Dyjak recently conducted an experiment that showed that an AWS token was abused after 11 (!) minutes after being leaked to GitHub.

There is a Node-wrapper for Talisman that makes integration easy.

Alternatives

I have not researched other tools or alternatives yet.

Potential downsides

This might slow down developer productivity if it takes too long to run on push.