Hello HN,<p>In the age of LLMs sucking in random secrets, sandbox escapes, and RCE orbital bombardment, I thought it&#x27;d be a good idea to create a Maven Extension that defers to the MacOS keychain for resolving secrets. In general, it&#x27;s a good idea to not have any secrets (passwords, tokens, etc) stored in plaintext files. Also, this allows your machines to be FIPS-140 complaint, if thats a thing for your job.<p>Locksmith is a Maven Core Extension that defers to the MacOS Keychain. The entry format in settings.xml looks like:<p>{[type=locksmith]nexus.superbiz.example.com&#x2F;username}<p>This was a fun project and I used the Project Panama FFM with jextract for the first time. The FFM is a great iteration on JNI (which still has it&#x27;s place) and was pretty much brainless to

  • 情报分类：项目价值、技术价值
  • 命中依据：密钥管理工具，安全实用
  • 来源：Hacker News 新项目
  • 原作者：exabrial
  • 发布时间：2026/9/10 00:01:47