secretive/FAQ.md

34 lines
1.9 KiB
Markdown
Raw Normal View History

2020-03-26 06:35:02 +00:00
# FAQ
2020-03-28 02:24:37 +00:00
### How do I import my current SSH keys, or export my Secretive Keys?
The secure enclave doesn't allow import or export of private keys. For any new computer, you should just create a new set of keys. If you're using a smart card, you _might_ be able to export your private key from the vendor's software.
2020-03-26 06:35:02 +00:00
### Secretive doesn't work with my git client
Secretive relies on the `SSH_AUTH_SOCK` environment variable being respected. The `git` and `ssh` command line tools natively respect this, but third party apps may require some configuration to work. A non-exhaustive list of clients is provided here:
Tower - [Instructions](https://www.git-tower.com/help/mac/integration/environment)
GitHub Desktop: Should just work, no configuration needed
### Why should I trust you?
You shouldn't, for a piece of software like this. Secretive, by design, has an auditable build process. Each build has a fully auditable build log, showing the source it was built from and a SHA of the build product. You can check the SHA of the zip you download against the SHA output in the build log (which is linked in the About window).
### I want to build Secretive from source
Awesome! Just bear in mind that because an app only has access to the keychain items that it created, if you have secrets that you created with the prebuilt version of Secretive, you'll be unable to access them using your own custom build (since you'll have changed the bundled ID).
### I have a security issue
Please contact [max.goedjen@gmail.com](mailto:max.goedjen@gmail.com) with a subject containing "SECRETIVE SECURITY" immediately with details, and I'll address the issue and credit you ASAP.
2020-03-31 06:44:38 +00:00
### I have a non-security related bug
Please file a [GitHub issue](https://github.com/maxgoedjen/secretive/issues) for it.
2020-03-26 06:35:02 +00:00
### I want to contribute to Secretive
2020-03-28 02:24:37 +00:00
Sweet! Please check out the [contributing guidelines](CONTRIBUTING.md) and go from there.