keyring_exe_wrapper.py

#!/usr/bin/env python

"""Wraps EXE to use keyring to fetch the password securely."""

import os
import subprocess
import sys

import keyring

EXE = "roam-api"
SERVICE = "https://www.roamresearch.com"
USERNAME_ENV_VAR = "ROAM_API_EMAIL"
PASSWORD_ENV_VAR = "ROAM_API_PASSWORD"

username = os.environ[USERNAME_ENV_VAR]
password = keyring.get_password(SERVICE, username)
env = os.environ.copy()
env[PASSWORD_ENV_VAR] = password
subprocess.run([EXE, *sys.argv[1:]], check=True, env=env)