macOS keychain should allow biometric authentication
@Benehiko is already working on this.
Since Jul 18, 2025.
Assessment
This issue has not been assessed yet.
Description
The underlying library we use for the keychain does not support using biometric authentication to allow fetching secrets.
An attempt was made to support this in this PR https://github.com/keybase/go-keychain/pull/107, but it was unfortunately never merged. We could cherry-pick from here and perhaps get this into our fork at https://github.com/Benehiko/go-keychain
- Dominant language
- Go
- Stars
- 91
- Forks
- 16
- Avg merge
- 9h 3m
- Merged PRs (30d)
- 24
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from docker/secrets-engine
-
Linux keychain dials a new D-Bus connection per operation, defeating per-entry access confirmation Open
Difficulty 5/5 Over a week Newbie friendliness 42/100
docker/secrets-engine#648 · 1 comment ·
-
Difficulty 3/5 1-2 days Newbie friendliness 65/100
docker/secrets-engine#584 · 1 comment · 1 reaction ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
docker/secrets-engine#551 · 2 comments · 3 reactions ·
-
Difficulty 5/5 Over a week Newbie friendliness 30/100
docker/secrets-engine#534 · 15 comments · 4 reactions ·
-
Dynamic Scopes Open
docker/secrets-engine#393 · 1 assignee ·
All issues in docker/secrets-engine
Similar issues
-
Difficulty 1/5 Under an hour Newbie friendliness 84/100
-
enhancement needs triage
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
kind/cleanup
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
kubernetes-sigs/kueue#15947 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
sympozium-ai/sympozium#627 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100