Show HN: Locksmith: Store Maven Secrets in the macOS Keychain (Or a Unix Socket)https://github.com/exabrial/locksmith
Hello HN, In the age of LLMs sucking in random secrets, sandbox escapes, and RCE orbital bombardment, I thought it'd be a good idea to create a Maven Extension that defers to the MacOS keychain for resolving secrets. In general, it's a good idea to not have any secrets (passwords, tokens, etc) stored in plaintext files. Also, this allows your machines to be FIPS-140 complaint, if thats a thing for your job. Locksmith is a Maven Core Extension that defers to the MacOS Keychain. The entry format in settings.xml looks like: {[type=locksmith]nexus.superbiz.example.com/username} This was a fun p…