- 運作狀態
- 上線中
- 30 天上線率 100%
- 最近程式碼更新
- 11月1日
- 活躍儲存庫
- 最新版本
- 無
- 貢獻者
- 1 人
- 分支 0
- 授權條款
- 尚未識別 · 請檢查原文
- nomorevibe 收錄
- 11月10日
- 儲存庫建立於 2026年10月
語言組成
- Swift 83.1%
- HTML 7.8%
- Python 4.9%
- CSS 等 4.2%
更新0 筆更新
全部尚未偵測到更新。GitHub 發布版本後會顯示在這裡。
安全 分類的熱門專案
依最近已完成的 8 小時觀測回合間的 GitHub 星號增量排序
尚未偵測到更新。GitHub 發布版本後會顯示在這裡。
依最近已完成的 8 小時觀測回合間的 GitHub 星號增量排序
個人 GitHub 帳號下公開儲存庫的擁有者可以登入並驗證所有權，自行管理介紹，無需管理員核准。
登入並產生驗證檔案，在 30 分鐘內將其提交至此儲存庫的預設分支。其他分支或分叉儲存庫中的檔案無效。然後在下方檢查檔案，即可無需管理員核准直接管理專案。請保留檔案以維持管理權限。
如需登入，將前往登入頁面。登入後請回到此處，再次點擊所選的驗證按鈕。
在專案資料夾中執行 /nomorevibe verify，即可驗證所有權並自行管理介紹。
一分鐘完成驗證Your coding agents use your keys. They don't get to read them. Mac app + CLI for API keys, source-available (PolyForm Strict).
翻譯準備中
正在載入完整 README。
檢視完整 README ↗Your coding agents use your keys. They don't get to read them.
Secretariat is a native Mac app with a command line tool. API keys live in your iCloud keychain; Claude Code, Codex, OpenCode and other agents start your tools through secretariat run, so the program gets the values and the agent sees [masked]. It also captures keys from the clipboard or a screenshot, guards commits and agent commands, hands MCP tokens to Claude Code without plain text, logs who used which key, and backs up everything sealed to a recovery key only you hold.
Website, download and price: https://secretariat.moinsen.dev · What it protects and what it doesn't: threat model
So you can check what a tool that holds your keys actually does, instead of taking our word for it.
Sources/SecretariatCore (vault, keychain, CLI, masking, guard, history, backup) and Sources/Secretariat (the app).Tests/SecretariatCoreTests. Run them with xcrun swift test (Xcode's toolchain; a swift.org toolchain on the PATH lacks the macOS frameworks).PLAN.md lists requirements and acceptance criteria, TRACKER.md the evidence per task. The evidence reports (docs/t0xx-evidence.md) say what was run and observed, including what was not tested. New features are reviewed by a separate reviewer agent with a fresh context before release; its findings and our fixes are in docs/review-*.md. These are our own checks, not an outside audit.docs/release-*.md record build, notarization and distribution for each version.Source-available under the PolyForm Strict License 1.0.0: you may read and audit the code and use it for noncommercial purposes. You may not distribute it or make modified versions. Commercial use needs a Secretariat license, which also gets you the signed, notarized build and all 1.x updates.
Building from source as-is will not get you a working app: keychain access, iCloud sync and the CLI inside the bundle depend on the developer's signing identity and provisioning profile.
Ulrich Diedrichsen, Hamburg · [email protected] · https://www.moinsen.dev
Found a security problem? Please write to [email protected] before opening a public issue.