diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f05e9683..57683336 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -59,14 +59,19 @@ jobs:
           go-version: ${{ env.GO_VERSION }}
           cache: true
       -
-        name: Install deps
+        name: Install deps (ubuntu)
         if: startsWith(matrix.os, 'ubuntu-')
         run: |
           sudo apt-get update
           sudo apt-get install -y dbus-x11 gnome-keyring libsecret-1-dev pass
+      -
+        name: Install deps (macOS)
+        if: startsWith(matrix.os, 'macOS-')
+        run: |
+          brew install pass
       -
         name: GPG conf
-        if: startsWith(matrix.os, 'ubuntu-')
+        if: ${{ !startsWith(matrix.os, 'windows-') }}
         uses: actions/github-script@v6
         id: gpg
         with:
@@ -83,18 +88,21 @@ jobs:
             core.setOutput('passphrase', fs.readFileSync('.github/workflows/fixtures/7D851EB72D73BDA0.pass', {encoding: 'utf8'}));
       -
         name: Import GPG key
-        if: startsWith(matrix.os, 'ubuntu-')
+        if: ${{ !startsWith(matrix.os, 'windows-') }}
         uses: crazy-max/ghaction-import-gpg@v5
         with:
           gpg_private_key: ${{ steps.gpg.outputs.key }}
           passphrase: ${{ steps.gpg.outputs.passphrase }}
+          trust_level: 5
+      -
+        name: Init pass
+        if: ${{ !startsWith(matrix.os, 'windows-') }}
+        run: |
+          pass init 7D851EB72D73BDA0
+        shell: bash
       -
         name: Test
         run: |
-          if [[ "${{ matrix.os }}" = ubuntu-* ]]; then
-            echo -e "trust\n5\ny" | gpg --batch --no-tty --command-fd 0 --edit-key 7D851EB72D73BDA0
-            pass init 7D851EB72D73BDA0
-          fi
           make test COVERAGEDIR=${{ env.DESTDIR }}
         shell: bash
       -
diff --git a/osxkeychain/cmd/main_darwin.go b/osxkeychain/cmd/main.go
similarity index 88%
rename from osxkeychain/cmd/main_darwin.go
rename to osxkeychain/cmd/main.go
index e3ab9ab7..08844b47 100644
--- a/osxkeychain/cmd/main_darwin.go
+++ b/osxkeychain/cmd/main.go
@@ -1,3 +1,5 @@
+//go:build darwin && cgo
+
 package main
 
 import (
diff --git a/osxkeychain/osxkeychain_darwin.c b/osxkeychain/osxkeychain.c
similarity index 99%
rename from osxkeychain/osxkeychain_darwin.c
rename to osxkeychain/osxkeychain.c
index 845012bd..840b85a5 100644
--- a/osxkeychain/osxkeychain_darwin.c
+++ b/osxkeychain/osxkeychain.c
@@ -1,4 +1,4 @@
-#include "osxkeychain_darwin.h"
+#include "osxkeychain.h"
 #include <CoreFoundation/CoreFoundation.h>
 #include <Foundation/NSValue.h>
 #include <stdio.h>
diff --git a/osxkeychain/osxkeychain_darwin.go b/osxkeychain/osxkeychain.go
similarity index 99%
rename from osxkeychain/osxkeychain_darwin.go
rename to osxkeychain/osxkeychain.go
index 08a08463..e6347304 100644
--- a/osxkeychain/osxkeychain_darwin.go
+++ b/osxkeychain/osxkeychain.go
@@ -1,10 +1,12 @@
+//go:build darwin && cgo
+
 package osxkeychain
 
 /*
 #cgo CFLAGS: -x objective-c
 #cgo LDFLAGS: -framework Security -framework Foundation
 
-#include "osxkeychain_darwin.h"
+#include "osxkeychain.h"
 #include <stdlib.h>
 */
 import "C"
diff --git a/osxkeychain/osxkeychain_darwin.h b/osxkeychain/osxkeychain.h
similarity index 100%
rename from osxkeychain/osxkeychain_darwin.h
rename to osxkeychain/osxkeychain.h
diff --git a/osxkeychain/osxkeychain_darwin_test.go b/osxkeychain/osxkeychain_test.go
similarity index 99%
rename from osxkeychain/osxkeychain_darwin_test.go
rename to osxkeychain/osxkeychain_test.go
index 425f3140..447c1452 100644
--- a/osxkeychain/osxkeychain_darwin_test.go
+++ b/osxkeychain/osxkeychain_test.go
@@ -1,3 +1,5 @@
+//go:build darwin && cgo
+
 package osxkeychain
 
 import (
diff --git a/pass/pass_test.go b/pass/pass_test.go
index bec40530..8ab10f59 100644
--- a/pass/pass_test.go
+++ b/pass/pass_test.go
@@ -1,3 +1,5 @@
+//go:build !windows
+
 package pass
 
 import (
@@ -8,75 +10,115 @@ import (
 )
 
 func TestPassHelper(t *testing.T) {
-	helper := Pass{}
-
 	creds := &credentials.Credentials{
 		ServerURL: "https://foobar.docker.io:2376/v1",
 		Username:  "nothing",
 		Secret:    "isthebestmeshuggahalbum",
 	}
 
-	_ = helper.CheckInitialized()
+	helper := Pass{}
+	if err := helper.checkInitialized(); err != nil {
+		t.Error(err)
+	}
+
+	if err := helper.Add(creds); err != nil {
+		t.Error(err)
+	}
+
+	u, s, err := helper.Get(creds.ServerURL)
+	if err != nil {
+		t.Error(err)
+	}
+	if u != creds.Username {
+		t.Errorf("invalid username %s", u)
+	}
+	if s != creds.Secret {
+		t.Errorf("invalid secret: %s", s)
+	}
+
+	if err := helper.Delete(creds.ServerURL); err != nil {
+		t.Error(err)
+	}
+	if _, _, err := helper.Get(creds.ServerURL); !credentials.IsErrCredentialsNotFound(err) {
+		t.Errorf("expected credentials not found, actual: %v", err)
+	}
+}
+
+func TestPassHelperCheckInit(t *testing.T) {
+	helper := Pass{}
+	if v := helper.CheckInitialized(); !v {
+		t.Errorf("expected true, actual: %v", v)
+	}
+}
+
+func TestPassHelperList(t *testing.T) {
+	creds := []*credentials.Credentials{
+		{
+			ServerURL: "https://foobar.docker.io:2376/v1",
+			Username:  "foo",
+			Secret:    "isthebestmeshuggahalbum",
+		},
+		{
+			ServerURL: "https://foobar.docker.io:2375/v1",
+			Username:  "bar",
+			Secret:    "isthebestmeshuggahalbum",
+		},
+	}
 
-	helper.Add(creds)
+	helper := Pass{}
+	if err := helper.checkInitialized(); err != nil {
+		t.Error(err)
+	}
 
-	creds.ServerURL = "https://foobar.docker.io:9999/v2"
-	helper.Add(creds)
+	for _, cred := range creds {
+		if err := helper.Add(cred); err != nil {
+			t.Error(err)
+		}
+	}
 
 	credsList, err := helper.List()
 	if err != nil {
-		t.Fatal(err)
+		t.Error(err)
 	}
-
 	for server, username := range credsList {
-		if !(strings.Contains(server, "2376") ||
-			strings.Contains(server, "9999")) {
-			t.Fatalf("invalid url: %s", creds.ServerURL)
+		if !(strings.HasSuffix(server, "2376/v1") || strings.HasSuffix(server, "2375/v1")) {
+			t.Errorf("invalid url: %s", server)
 		}
-
-		if username != "nothing" {
-			t.Fatalf("invalid username: %v", username)
+		if !(username == "foo" || username == "bar") {
+			t.Errorf("invalid username: %v", username)
 		}
 
 		u, s, err := helper.Get(server)
 		if err != nil {
-			t.Fatal(err)
+			t.Error(err)
 		}
-
 		if u != username {
-			t.Fatalf("invalid username %s", u)
+			t.Errorf("invalid username %s", u)
 		}
-
 		if s != "isthebestmeshuggahalbum" {
-			t.Fatalf("invalid secret: %s", s)
+			t.Errorf("invalid secret: %s", s)
 		}
 
-		err = helper.Delete(server)
-		if err != nil {
-			t.Fatal(err)
+		if err := helper.Delete(server); err != nil {
+			t.Error(err)
 		}
-
-		_, _, err = helper.Get(server)
-		if !credentials.IsErrCredentialsNotFound(err) {
-			t.Fatalf("expected credentials not found, actual: %v", err)
+		if _, _, err := helper.Get(server); !credentials.IsErrCredentialsNotFound(err) {
+			t.Errorf("expected credentials not found, actual: %v", err)
 		}
 	}
 
 	credsList, err = helper.List()
 	if err != nil {
-		t.Fatal(err)
+		t.Error(err)
 	}
-
 	if len(credsList) != 0 {
-		t.Fatal("didn't delete all creds?")
+		t.Error("didn't delete all creds?")
 	}
 }
 
 func TestMissingCred(t *testing.T) {
 	helper := Pass{}
-
-	_, _, err := helper.Get("garbage")
-	if !credentials.IsErrCredentialsNotFound(err) {
-		t.Fatalf("expected credentials not found, actual: %v", err)
+	if _, _, err := helper.Get("garbage"); !credentials.IsErrCredentialsNotFound(err) {
+		t.Errorf("expected credentials not found, actual: %v", err)
 	}
 }
diff --git a/secretservice/cmd/main_linux.go b/secretservice/cmd/main.go
similarity index 89%
rename from secretservice/cmd/main_linux.go
rename to secretservice/cmd/main.go
index 6965ca75..22d2a6d4 100644
--- a/secretservice/cmd/main_linux.go
+++ b/secretservice/cmd/main.go
@@ -1,3 +1,5 @@
+//go:build linux && cgo
+
 package main
 
 import (
diff --git a/secretservice/secretservice_linux.c b/secretservice/secretservice.c
similarity index 99%
rename from secretservice/secretservice_linux.c
rename to secretservice/secretservice.c
index 73502a2e..676cddb2 100644
--- a/secretservice/secretservice_linux.c
+++ b/secretservice/secretservice.c
@@ -1,6 +1,6 @@
 #include <string.h>
 #include <stdlib.h>
-#include "secretservice_linux.h"
+#include "secretservice.h"
 
 const SecretSchema *docker_get_schema(void)
 {
diff --git a/secretservice/secretservice_linux.go b/secretservice/secretservice.go
similarity index 98%
rename from secretservice/secretservice_linux.go
rename to secretservice/secretservice.go
index 9b1d4cca..caf0fe7c 100644
--- a/secretservice/secretservice_linux.go
+++ b/secretservice/secretservice.go
@@ -1,9 +1,11 @@
+//go:build linux && cgo
+
 package secretservice
 
 /*
 #cgo pkg-config: libsecret-1
 
-#include "secretservice_linux.h"
+#include "secretservice.h"
 #include <stdlib.h>
 */
 import "C"
diff --git a/secretservice/secretservice_linux.h b/secretservice/secretservice.h
similarity index 100%
rename from secretservice/secretservice_linux.h
rename to secretservice/secretservice.h
diff --git a/secretservice/secretservice_linux_test.go b/secretservice/secretservice_test.go
similarity index 98%
rename from secretservice/secretservice_linux_test.go
rename to secretservice/secretservice_test.go
index 402fdfaf..7609d656 100644
--- a/secretservice/secretservice_linux_test.go
+++ b/secretservice/secretservice_test.go
@@ -1,3 +1,5 @@
+//go:build linux && cgo
+
 package secretservice
 
 import (
diff --git a/wincred/cmd/main_windows.go b/wincred/cmd/main.go
similarity index 90%
rename from wincred/cmd/main_windows.go
rename to wincred/cmd/main.go
index c0b797fb..d2bcefb7 100644
--- a/wincred/cmd/main_windows.go
+++ b/wincred/cmd/main.go
@@ -1,3 +1,5 @@
+//go:build windows
+
 package main
 
 import (
diff --git a/wincred/wincred_windows.go b/wincred/wincred.go
similarity index 99%
rename from wincred/wincred_windows.go
rename to wincred/wincred.go
index 9579ce59..41c792bc 100644
--- a/wincred/wincred_windows.go
+++ b/wincred/wincred.go
@@ -1,3 +1,5 @@
+//go:build windows
+
 package wincred
 
 import (
diff --git a/wincred/wincred_windows_test.go b/wincred/wincred_test.go
similarity index 99%
rename from wincred/wincred_windows_test.go
rename to wincred/wincred_test.go
index e6010fe2..ed5f1f84 100644
--- a/wincred/wincred_windows_test.go
+++ b/wincred/wincred_test.go
@@ -1,3 +1,5 @@
+//go:build windows
+
 package wincred
 
 import (