How does it help prevent secrets from being leaked to Git?

It includes configurations for pre-commit hooks and CI/CD security stages using tools like TruffleHog to detect and block sensitive information before it reaches your repository.

Is there support for Kubernetes?

Yes, the skill provides patterns for the External Secrets Operator, allowing you to securely sync secrets from external providers directly into Kubernetes Secret resources.

Does this skill support GitHub Actions and GitLab CI?

Yes, it includes specialized templates and configuration patterns for both GitHub Actions and GitLab CI, covering native platform secrets as well as external vault integrations.

Can I automate secret rotation with this skill?

Absolutely. The skill provides specific implementation guides for automated rotation using AWS Lambda and manual rotation workflows for other environments.

CI/CD Secrets Management

Name: CI/CD Secrets Management
Author: lifangda

bylifangda

•

デプロイメントとDevOps

Secures sensitive credentials and automates secret rotation within CI/CD pipelines using industry-standard tools like HashiCorp Vault and AWS Secrets Manager.

概要

This skill provides a comprehensive framework for implementing enterprise-grade secrets management across various cloud platforms and CI/CD tools. It enables developers to move away from hardcoded credentials by providing implementation patterns for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. By focusing on secret rotation, least-privilege access, and automated scanning, this skill ensures that API keys, database passwords, and TLS certificates remain secure throughout the software delivery lifecycle.

主な機能

Production-ready templates for GitHub Actions and GitLab CI/CD
Security auditing and automated secret scanning with TruffleHog
Multi-cloud support for AWS, Azure, GCP, and HashiCorp Vault integration
Kubernetes integration via External Secrets Operator (ESO)
16 GitHub stars
Automated secret rotation patterns and implementation workflows

ユースケース

Implementing automated rotation for production database credentials
Setting up secure pre-commit hooks to prevent credential leakage
Migrating from hardcoded environment variables to centralized secrets management

概要

主な機能

Production-ready templates for GitHub Actions and GitLab CI/CD
Security auditing and automated secret scanning with TruffleHog
Multi-cloud support for AWS, Azure, GCP, and HashiCorp Vault integration
Kubernetes integration via External Secrets Operator (ESO)
16 GitHub stars
Automated secret rotation patterns and implementation workflows

ユースケース

Implementing automated rotation for production database credentials
Setting up secure pre-commit hooks to prevent credential leakage
Migrating from hardcoded environment variables to centralized secrets management