How to fix fatal: unable to access keychain: User interaction is not allowed in Git

# Check if a display is available
echo $DISPLAY

# Check if running in a terminal
tty

# Check the session type
echo $TERM_PROGRAM

# Unlock the login keychain
security unlock-keychain ~/Library/Keychains/login.keychain-db
# You'll be prompted for your macOS password

# Unlock with password passed via stdin (more secure)
security unlock-keychain -p "$(cat /path/to/secure/password-file)" ~/Library/Keychains/login.keychain-db

# Or set password in environment variable (less secure, for CI only)
security unlock-keychain -p "$KEYCHAIN_PASSWORD" ~/Library/Keychains/login.keychain-db

# Show Keychain info
security show-keychain-info ~/Library/Keychains/login.keychain-db

# Set credentials via environment variable
export GIT_ASKPASS=/bin/echo
export GIT_USERNAME="your-username"
export GIT_PASSWORD="your-personal-access-token"

# Or embed credentials in the URL (less secure but works)
git clone https://username:[email protected]/owner/repo.git

# Or use the credential helper store (stores in plain text file)
git config --global credential.helper store

# Configure Git to use specific credentials for this session
git config credential.helper '!f() { echo "username=$GIT_USERNAME"; echo "password=$GIT_PASSWORD"; }; f'

- name: Clone repository
  run: |
    git clone https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com/owner/repo.git

withCredentials([usernamePassword(credentialsId: 'github-creds', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_TOKEN')]) {
    sh 'git clone https://$GIT_USER:[email protected]/owner/repo.git'
}

ssh-keygen -t ed25519 -C "[email protected]" -f ~/.ssh/id_ed25519 -N ""
# -N "" creates the key without a passphrase (required for automation)

cat ~/.ssh/id_ed25519.pub
# Copy this output to GitHub/GitLab SSH keys settings

# Check current remote
git remote -v

# Change from HTTPS to SSH
git remote set-url origin [email protected]:owner/repo.git

# Verify the change
git remote -v

# Start SSH agent
eval "$(ssh-agent -s)"

# Add key (no passphrase required for automation)
ssh-add ~/.ssh/id_ed25519

# Or add from environment variable
echo "$SSH_PRIVATE_KEY" | ssh-add -

# Check current credential helper
git config --global credential.helper

# If it shows 'osxkeychain', remove it
git config --global --unset credential.helper

# Or set it to 'store' or 'cache' instead
git config --global credential.helper store  # Stores in ~/.git-credentials (plain text)
git config --global credential.helper cache  # Caches in memory for 15 minutes

# Override for this repo only
git config credential.helper store

# Don't store credentials at all (will prompt every time)
git config --global credential.helper ""

# Find the credential item
security find-generic-password -s "github.com" -l "github.com"

# Delete and re-add with different permissions
security delete-generic-password -s "github.com"

# Add without ACL restrictions (accessible by all apps)
security add-generic-password -a "username" -s "github.com" -w "your-token" -A

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>com.example.gitbackup</string>
    <key>ProgramArguments</key>
    <array>
        <string>/bin/bash</string>
        <string>-c</string>
        <string>/usr/local/bin/git -C /path/to/repo pull</string>
    </array>
    <key>StartInterval</key>
    <integer>3600</integer>
    <key>SessionCreate</key>
    <true/>
    <key>AcquireUserEnvironment</key>
    <true/>
</dict>
</plist>

<key>EnvironmentVariables</key>
<dict>
    <key>SSH_AUTH_SOCK</key>
    <string>/tmp/ssh-agent.sock</string>
</dict>

jobs:
  build:
    runs-on: macos-latest
    steps:
      - name: Configure Git credentials
        run: |
          # Use HTTPS with token
          git config --global credential.helper store
          echo "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com" > ~/.git-credentials

      - name: Checkout
        uses: actions/checkout@v4
        with:
          token: ${{ secrets.GITHUB_TOKEN }}

      # Or use SSH
      - name: Setup SSH
        uses: webfactory/[email protected]
        with:
          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}

pipeline {
    agent { label 'macos' }
    environment {
        GIT_CREDENTIALS = credentials('github-token')
    }
    stages {
        stage('Checkout') {
            steps {
                sh '''
                    git config --global credential.helper store
                    echo "https://[email protected]" > ~/.git-credentials
                    git clone https://github.com/owner/repo.git
                '''
            }
        }
    }
}

- name: Unlock Keychain
  run: |
    security unlock-keychain -p "${{ secrets.KEYCHAIN_PASSWORD }}" ~/Library/Keychains/login.keychain-db
    security set-keychain-settings -lut 7200 ~/Library/Keychains/login.keychain-db