Add support for `apw` to get iCloud Keychain secrets
Author: BaelsonCreated Mar 7, 2026Updated Jul 29, 2026
Labelsenhancementin dependencypatience
Is your feature request related to a problem? Please describe.
On macOS, chezmoi can currently get passwords from the login keyring and not from the iCloud keyring (as noted in https://github.com/twpayne/chezmoi/issues/1137)
Describe the solution you'd like
https://github.com/bendews/apw enables read-only CLI access iCloud keyring. It would be great if it was integrated into chezmoi so we can pull API Keys and other text based secrets into our keyring and replace them with chezmoi templates which get the secrets at chezmoi apply time.
Enable the following scenarios:
- Test chezmoi integration with :
chezmoi secret keyring get --service=icloud_keyring --user=chezmoi_icloud - Get password from template file:
- {{- if .personal -}} {{- icloud "chezmoi_icloud" -}} {{- end -}}
Describe alternatives you've considered
Use supported age/gpg encryption of the files with secrets.
Additional context
Video demo from apw repo
https://github.com/user-attachments/assets/8cb45571-d164-4e28-aa6e-64d27705d6d2
Source: twpayne/chezmoi