How does this skill prevent secret leakage in build logs?

It provides specific implementation patterns for secret masking in GitHub Actions and GitLab CI, ensuring that sensitive values are automatically redacted from logs.

Can I use this skill with multi-cloud architectures?

Yes, it covers implementations for AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and platform-agnostic solutions like HashiCorp Vault.

Does it include automated secret rotation logic?

Yes, the skill provides both manual rotation processes and automated rotation code examples using serverless functions like AWS Lambda.

How does the skill handle Kubernetes secrets?

It includes configurations for the External Secrets Operator, allowing you to sync secrets from external providers directly into Kubernetes Secret objects securely.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: carlopezzuto

bycarlopezzuto

0•

Seguridad y Pruebas

Implements robust, automated secrets management and rotation patterns for CI/CD pipelines to secure sensitive credentials.

This skill provides comprehensive patterns and best practices for managing sensitive information across various CI/CD environments and cloud providers. It guides developers through integrating industry-standard tools like HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault into deployment workflows. By focusing on automated secret rotation, least-privilege access, and proactive secret scanning with tools like TruffleHog, the skill ensures that API keys, database credentials, and certificates remain secure throughout the software development lifecycle without ever being hardcoded in source control.

Características Principales

01CI/CD native secret configuration for GitHub Actions and GitLab CI

020 GitHub stars

03Automated secret rotation workflows using AWS Lambda and native tools

04Kubernetes integration via External Secrets Operator patterns

05Multi-provider integration patterns for Vault, AWS, Azure, and GCP

06Proactive secret scanning and pre-commit hook implementations

Casos de Uso

01Implementing automated rotation for cloud provider IAM keys and third-party API tokens

02Securing production database credentials in automated deployment pipelines

03Preventing credential leakage in build logs through advanced masking techniques

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add carlopezzuto/agents secrets-management

For use in Claude.ai and ChatGPT

Download Skill