GitHub - jitpass/jit: Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and local-first.

Your secrets live in plaintext all over your machine: .env files, ~/.aws/credentials, ~/.zshrc exports, .npmrc tokens, MCP configs. Anything running as you can read them. A bad curl | sh, a sketchy npm install, or one of the AI agents now running in your editor with your full permissions. jit moves each secret into a local encrypted vault gated by Touch ID, and rewrites the files so your tools kee

[nguyen-oi]

平文シークレットをTouch IDで保護してJIT注入する発想は賢い

[pchatsu]

via https://x.com/about_hiroppy/status/2088896165593182425