#4944·chezmoi

Add support for `apw` to get iCloud Keychain secrets

Author: BaelsonCreated Mar 7, 2026Updated Jul 29, 2026
Labelsenhancementin dependencypatience

Is your feature request related to a problem? Please describe.

On macOS, chezmoi can currently get passwords from the login keyring and not from the iCloud keyring (as noted in https://github.com/twpayne/chezmoi/issues/1137)

Describe the solution you'd like

https://github.com/bendews/apw enables read-only CLI access iCloud keyring. It would be great if it was integrated into chezmoi so we can pull API Keys and other text based secrets into our keyring and replace them with chezmoi templates which get the secrets at chezmoi apply time.

Enable the following scenarios:

  • Test chezmoi integration with : chezmoi secret keyring get --service=icloud_keyring --user=chezmoi_icloud
  • Get password from template file:
  • {{- if .personal -}} {{- icloud "chezmoi_icloud" -}} {{- end -}}

Describe alternatives you've considered

Use supported age/gpg encryption of the files with secrets.

Additional context

Video demo from apw repo

https://github.com/user-attachments/assets/8cb45571-d164-4e28-aa6e-64d27705d6d2