Currently, the ~/.githubsecrets/credentials file is not protected with any password. This is a minor security risk because this means that the personal-access-tokens are compromised only if your local machine is hacked.
Even though it's a minor security risk, I'd like to implement keyring, which means - the ~/.githubsecrets/credentials file is now encrypted and can only be decrypted by using keyring.
Note - when using Docker / CI processes, the keyrings.alt is used
Currently, the
~/.githubsecrets/credentialsfile is not protected with any password. This is a minor security risk because this means that the personal-access-tokens are compromised only if your local machine is hacked.Even though it's a minor security risk, I'd like to implement keyring, which means - the
~/.githubsecrets/credentialsfile is now encrypted and can only be decrypted by using keyring.Note - when using Docker / CI processes, the keyrings.alt is used