Which cloud platforms are supported?

The skill includes specific guidance for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager, along with platform-agnostic tools like HashiCorp Vault.

Can I automate secret rotation using this skill?

Yes, it provides code examples for automated rotation processes, including AWS Lambda functions that update both the secret store and the target resource.

How does this skill help prevent credential leaks?

It provides implementation patterns for secret scanning tools like TruffleHog and pre-commit hooks to catch secrets before they are pushed to a repository.

Does it work with Kubernetes?

Yes, it includes patterns for the External Secrets Operator to securely sync secrets from external providers into Kubernetes clusters.

CI/CD Secrets Management

Name: CI/CD Secrets Management
Author: HermeticOrmus

byHermeticOrmus

•

デプロイメントとDevOps

Implements secure secrets handling and rotation for CI/CD pipelines using industry-standard tools like Vault and AWS Secrets Manager.

概要

This skill empowers Claude to architect and implement robust security protocols for sensitive credentials within software delivery pipelines. It provides domain-specific patterns for HashiCorp Vault, cloud-native secret managers, and platform-specific variables, ensuring that API keys, database passwords, and TLS certificates are never hardcoded. By incorporating automated secret rotation and security scanning, this skill helps developers minimize their attack surface and maintain compliance across complex DevOps environments.

主な機能

Secret scanning and pre-commit hook integration
Platform-specific variable configuration (GitHub/GitLab)
2 GitHub stars
HashiCorp Vault setup and CI/CD integration
Automated secret rotation implementation
Cloud-native secret management (AWS, Azure, GCP)

ユースケース

Implementing automated API key rotation for AWS environments
Setting up secret scanning to prevent accidental credential leaks in Git
Securing database credentials in production pipelines