Skip to content

Add apple keychain support#657

Closed
BitPhinix wants to merge 3 commits intodmno-dev:mainfrom
BitPhinix:apple-keychain
Closed

Add apple keychain support#657
BitPhinix wants to merge 3 commits intodmno-dev:mainfrom
BitPhinix:apple-keychain

Conversation

@BitPhinix
Copy link
Copy Markdown

I vibe-coded this entire thing but it's rather simple and works well

@theoephraim
Copy link
Copy Markdown
Member

theoephraim commented Apr 25, 2026

First off - thanks for the PR! :)

You sir, are in for a real treat. We have native keychain support baked into varlock core about to be released, and it's WAY better than deferring to the security cli :)

Theres a native swift binary that will be packaged with the npm module. It adds biometric fingerprint unlock, pinned to the current terminal session. Use ITEM=keychain(prompt) and you get a native mac popup to select an item, or add a new one. Automatically sets an ACL rule to limit access to said binary. Gets replaced in the file to to ITEM=keychain(some/id) and from then on resolves it normally (gated behind fingerprint).

Also we have a new varlock() resolver which uses secure enclave (behind fingerprint unlock) as an encryption key, but stores the encrypted value in the file, so no keychain involved.

You can install with the preview package available in this PR. Use https://pkg.pr.new/varlock@567 instead of a version number for varlock in your package.json. Would love to have some more feedback before it's released!

@BitPhinix
Copy link
Copy Markdown
Author

Oh amazing, thanks for your hard work!

@BitPhinix BitPhinix closed this Apr 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants