maxgoedjen/secretive

This system is a macOS-based SSH agent and secret management service that handles cryptographic operations, including signing requests and key management. It provides a modular architecture for managing secrets across various storage backends, such as the macOS Keychain, Smart Cards, and the Secure Enclave, while also supporting post-quantum algorithms like MLDSA. The system enforces security through hardened XPC services, code-signing requirements, and persistent biometric authentication contexts.

This period focused on restructuring the application's secret management architecture by introducing dedicated Swift packages (SecretKit, SecretAgentKit) and migrating cryptographic operations to Apple's CryptoKit. The work also involved hardening the background agent via XPC services and establishing a robust update-checking infrastructure.

11 changes

This period focused on modularizing the codebase by extracting SSH protocol handling into a dedicated package and introducing a new CertificateKit for managing SSH certificates in the macOS keychain. The work also included adding persistent biometric authentication and updating localizations.

6 changes

maxgoedjen/secretive was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point the surveyor at a repository you know and see whether you agree with it.