diff --git a/.config/git/config b/.config/git/config
index 2d8d52d..ccfd336 100644
--- a/.config/git/config
+++ b/.config/git/config
@@ -3,7 +3,10 @@
 	name = stupidcomputer
 
 [credential "https://git.beepboop.systems"]
-	username = stupidcomputer
+	helper = !git-rbw-wrap "beepboop.systems gitea instance"
+
+[credential "https://github.com"]
+	helper = !git-rbw-wrap "github-pat"
 
 [advice]
 	addIgnoredFile = false
diff --git a/builds/utils/git-rbw-wrap b/builds/utils/git-rbw-wrap
new file mode 100755
index 0000000..cb72f91
--- /dev/null
+++ b/builds/utils/git-rbw-wrap
@@ -0,0 +1,12 @@
+#!/bin/sh
+
+[ -z "$1" ] && exit 1
+
+# wrap rbw get $1 --full to output in the git credential helper
+# format
+
+# username=yourusername
+# password=yourpassword
+
+output=$(rbw get $1 --full)
+echo "$output" | sed '1{s/^/password=/}' | sed 's/Username: /username=/g' | tac