To add on, I unlock login.keychain everytime my CI runs (and every ssh session) EDIT: Runners are self hosted hence the SSH