Skip to content

refactor: use native macOS keychain APIs for secret refs#122

Merged
rmanibus merged 1 commit into
mainfrom
fix/legacy-pr-review-followups
Mar 16, 2026
Merged

refactor: use native macOS keychain APIs for secret refs#122
rmanibus merged 1 commit into
mainfrom
fix/legacy-pr-review-followups

Conversation

@rmanibus
Copy link
Copy Markdown
Contributor

Summary

  • replace darwin keychain shell-outs (security ...) with native Security framework calls via github.com/keybase/go-keychain
  • migrate both secret-reference resolution (internal/secretref) and interactive store secret persistence (cmd/cloudstic) to the native API, including duplicate-item update handling
  • refresh RFC 0011 status and macOS notes to match current implementation and security guarantees

Validation

  • go test -count=1 ./cmd/cloudstic ./internal/secretref
  • go test -count=1 ./...
  • golangci-lint run ./...

@rmanibus rmanibus linked an issue Mar 16, 2026 that may be closed by this pull request
@rmanibus rmanibus added the chore Maintenance and tooling changes label Mar 16, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented Mar 16, 2026

Codecov Report

❌ Patch coverage is 30.12048% with 58 lines in your changes missing coverage. Please review.

Files with missing lines Patch % Lines
cmd/cloudstic/cmd_store.go 11.76% 45 Missing ⚠️
cmd/cloudstic/usage.go 0.00% 7 Missing ⚠️
cmd/cloudstic/cmd_profile.go 0.00% 6 Missing ⚠️

📢 Thoughts on this report? Let us know!

@rmanibus rmanibus force-pushed the fix/legacy-pr-review-followups branch from 84b5c12 to 5f6e6e1 Compare March 16, 2026 09:45
@rmanibus rmanibus merged commit b760cd8 into main Mar 16, 2026
5 checks passed
@rmanibus rmanibus deleted the fix/legacy-pr-review-followups branch March 16, 2026 09:48
@rmanibus rmanibus added refactor and removed chore Maintenance and tooling changes labels Apr 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RFC 0011: Implement macOS Keychain backend for profile secrets

1 participant