The awkward part of replacing GNOME Keyring is that years of secrets are already in it: Wi-Fi passwords, app tokens, the odd thing you forgot you saved. Switching the Secret Service over to rosec shouldn't mean leaving all of that behind, or doing a big-bang export the night you flip the switch.
So rosec now has a read-only GNOME Keyring provider. Point it at your existing keyring and every secret in there shows up on the bus alongside your other providers (Bitwarden, your local vault) as one unified collection. You can read them, copy the ones worth keeping into a vault you actually control, and retire the keyring whenever you're ready.
Read-only is deliberate. The keyring is the thing you're migrating away from; rosec treats it as a source to drain, not a destination to keep writing to. Nothing new lands back in it.
yay -S rosec-provider-gnome-keyring-bin
rosec provider add gnome-keyring
secret-tool search --all # your old keyring secrets, now served by rosec
One backend closer to rosec being the only Secret Service on the machine. KeePassXC is next on the list.
