jit

About

jit is a macOS command-line tool that scans the filesystem, shell history, and config files for plaintext secrets like API keys and AWS credentials, then moves them into an encrypted vault while leaving decoy values in place. Commands that need the real secret retrieve it just in time, so a compromised package, hijacked agent, or malware reading .env or dotfiles only gets a worthless decoy.