This skill provides specialized guidance for securing sensitive credentials in automated pipelines, enabling developers to integrate robust secrets management solutions like HashiCorp Vault, AWS Secrets Manager, and native platform tools into their CI/CD workflows. It focuses on implementing least-privilege access, automated secret rotation, and proactive scanning for leaked credentials, ensuring that API keys, database passwords, and TLS certificates remain protected throughout the software development lifecycle without ever being hardcoded in source control.
主な機能
01Automated secret rotation logic and implementations
02Proactive secret scanning using TruffleHog and pre-commit hooks
03HashiCorp Vault and AWS Secrets Manager integration patterns
040 GitHub stars
05Native GitHub and GitLab CI/CD secrets configuration
06Infrastructure-as-Code (Terraform) secrets management
