Presented Thursday, July 9, 2026, at Mac Admins Conference 2026, Penn State University.
Watch on YouTube | Download the slides (PDF)
Description
I once accidentally committed a sensitive API key to GitHub, and I only realized it when Security reached out to me. That “Oh, no!” moment was the reason I built Shikomi. This session introduces my open-source framework designed to help Mac Admins move away from risky, manual script management. I’ll show you how to use Shikomi to automate an efficient process that handles versioning, security scanning, GitHub Actions, and secret prevention.
This session is a mix of story, demo, and deconstruction. I’ll demonstrate how Shikomi helps you start every project with a secure-by-default posture, deconstructing how it uses Gitleaks, ShellCheck, and GitHub Actions to catch bugs and secrets before they can be committed. If a script is deployed with a package, I’ll show how the versions are synchronized automatically. I’m using Shikomi as a practical example of how we can all work more securely without the manual overhead of configuring a dozen individual tools.