What secret management tools does this skill support?

The skill supports a wide range of tools including HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native secrets for GitHub and GitLab.

Does it provide help with secret rotation?

Yes, it includes Python/Lambda examples for automated rotation in AWS and step-by-step manual rotation processes for other environments.

How does this skill help prevent credential leaks?

It provides configuration templates for secret scanning tools like TruffleHog and GitGuardian, as well as pre-commit hooks that scan code before it is pushed to a repository.

Can I use this for Kubernetes environments?

Yes, it includes patterns for the External Secrets Operator to securely sync secrets from external providers like Vault into Kubernetes native Secret objects.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: HermeticOrmus

byHermeticOrmus

0•

Despliegue y DevOps

Implements robust secrets management and security best practices for CI/CD pipelines and cloud infrastructure.

This skill provides comprehensive patterns and implementation guides for securing sensitive credentials within CI/CD workflows. It covers industry-standard tools like HashiCorp Vault, AWS Secrets Manager, and native platform secrets (GitHub/GitLab), enabling developers to automate secret rotation, implement least-privilege access, and prevent accidental exposure through secret scanning. Use this skill when architecting deployment pipelines that require secure handling of API keys, database credentials, and TLS certificates without hardcoding them into source code.

Características Principales

01Infrastructure as Code (Terraform) examples for secure secret retrieval

020 GitHub stars

03Integration patterns for HashiCorp Vault, AWS, Azure, and Google Secret Manager

04Automated secret rotation scripts and Lambda handler templates

05Pre-commit hooks and CI/CD jobs for secret scanning using TruffleHog

06Security best practices for masking, encrypting, and auditing sensitive data

Casos de Uso

01Implementing pre-commit hooks to prevent developers from accidentally committing plaintext credentials

02Setting up secure HashiCorp Vault integration with GitHub Actions or GitLab CI

03Automating the rotation of RDS database passwords using AWS Secrets Manager

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/after-the-third-cup secrets-management

For use in Claude.ai and ChatGPT

Download Skill