Guides
The tray app
A native menu bar app for macOS, Linux and Windows. It reads the same local data as the CLI — there is no separate service, no daemon of its own and nothing extra to trust.
What the icon tells you
| State | Shape | Means |
|---|---|---|
| Idle | The A-mark | Nothing exposed. |
| Monitoring | A-mark with two dots | Credentials worth rotating. |
| Exposed | A-mark in an amber ring | Critical credentials exposed. |
| Syncing | Segmented spinner | Scanning. |
| Error | A-mark with a slash | Data could not be read. |
Each state has its own shape, not just its own colour, so the icon still reads if you cannot tell the two apart.
Alerting
A newly appearing critical credential raises one native notification. Deduplicated by fingerprint, so the same secret never announces itself twice — and the first scan only establishes a baseline. Announcing a month of history at launch would train you to ignore the notification, which is the opposite of the point.
Reporting a bug from the menu
Help → Report a Bug opens a prefilled GitHub issue carrying the version, OS and architecture — and nothing else. There is deliberately no “attach diagnostics” button: this tool reads credential exposures, and a convenience that posted them to a public issue tracker would be the worst bug it could ship.
Running it at login
On macOS, a LaunchAgent template ships in packaging/. On Linux
and Windows, add the binary to your desktop environment's startup items.