Following on the CodeRabbit exploit, this details why secrets in env are a big no-no. It’s a good illustration of why my “littlesecrets” tool would be a good alternative.

ApplePi-Baker, a free macOS utility to Backup

Found this because I was trying to understand why the Nix Darwin was asking to “install a helper tool”. It’s the fact that Apple has this https://developer.apple.com/library/archive/documentation/Security/Conceptual/SecureCodingGuide/Articles/AccessControl.html tool now to improve macOS security