sxldier

  security create-keychain -P envs

  which get-env
  get-env () {
     security find-generic-password -s "$1" -w envs
   }

  which add-env
  add-env () {
      security add-generic-password -a "$USER" -s "$1" -w "$2" envs
   }

  add-env ENVNAME SECRET

  ENVVAR=“$(get-env ENVNAME)” ./script.sh