How can I prevent secrets from being committed to my repository?

This skill includes configurations for pre-commit hooks and CI/CD secret scanning tools like TruffleHog to detect and block sensitive information before it reaches your Git history.

Does this skill help with secret rotation?

Yes, it provides both manual rotation processes and automated rotation patterns using AWS Lambda and other automation scripts to ensure credentials are changed regularly.

What is secrets management in CI/CD?

Secrets management is the process of securely storing, accessing, and rotating sensitive data like passwords, API keys, and certificates without hardcoding them in your source code or configuration files.

Can I use these patterns with Infrastructure as Code?

Yes, the skill includes specific examples for using Terraform to securely retrieve and manage secrets within your cloud infrastructure.

Which tools does this Claude Code skill support?

It provides implementation patterns for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native secrets tools for GitHub Actions and GitLab CI.

CI/CD Secrets Management

Name: CI/CD Secrets Management
Author: HermeticOrmus

byHermeticOrmus

セキュリティとテスト

Implements secure handling, storage, and rotation of sensitive credentials across major CI/CD platforms and cloud providers.

概要

This skill provides specialized guidance for implementing robust secrets management in automated pipelines, ensuring sensitive data like API keys and database passwords are never exposed in source code. It covers comprehensive integration patterns for HashiCorp Vault, AWS Secrets Manager, and platform-native solutions like GitHub and GitLab Secrets. By providing implementation-ready workflows for least-privilege access, automated rotation, and secret scanning, it enables developers to build secure deployment environments that meet modern security compliance standards.

主な機能

Automated secret rotation patterns and implementation scripts
Comprehensive HashiCorp Vault integration for centralized secrets management
0 GitHub stars
Infrastructure-as-Code (Terraform) secret management patterns
Multi-cloud support for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager
Pre-commit and CI/CD secret scanning using tools like TruffleHog

ユースケース

Securely injecting database credentials and API keys into production deployment pipelines
Automating the rotation of third-party credentials without manual intervention or downtime
Setting up pre-commit hooks to prevent sensitive information from ever being committed to Git

概要

主な機能

Automated secret rotation patterns and implementation scripts
Comprehensive HashiCorp Vault integration for centralized secrets management
0 GitHub stars
Infrastructure-as-Code (Terraform) secret management patterns
Multi-cloud support for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager
Pre-commit and CI/CD secret scanning using tools like TruffleHog

ユースケース

Securely injecting database credentials and API keys into production deployment pipelines
Automating the rotation of third-party credentials without manual intervention or downtime
Setting up pre-commit hooks to prevent sensitive information from ever being committed to Git