How does this skill help prevent secret leaks?

It provides implementation guides for secret scanning tools like TruffleHog and GitGuardian, including pre-commit hooks and CI/CD stages to block leaked credentials.

Which secrets management tools are supported?

This skill supports HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, GitHub Secrets, and GitLab CI/CD variables.

Does it support automated secret rotation?

Yes, it includes specific patterns for automated rotation using AWS Lambda and best practices for manual rotation processes.

Can I use this with Kubernetes?

Yes, it includes configurations for the External Secrets Operator to synchronize secrets from external providers into Kubernetes Secret resources.

Does it include Terraform examples?

Yes, it provides HCL snippets for managing secret versions and retrieving data within Terraform infrastructure-as-code workflows.

CI/CD Secrets Management

Name: CI/CD Secrets Management
Author: amurata

byamurata

•

デプロイメントとDevOps

Implements secure storage, rotation, and access control for sensitive credentials across major CI/CD platforms and cloud providers.

概要

This skill empowers Claude to implement industry-standard secrets management practices within CI/CD pipelines, effectively eliminating hardcoded credentials and mitigating security risks. It provides domain-specific guidance for integrating tools like HashiCorp Vault, AWS Secrets Manager, and native platform solutions, while promoting essential patterns such as automated rotation, least-privilege access, and proactive secret scanning to ensure a robust security posture throughout the software delivery lifecycle.

主な機能

Automated secret rotation implementation patterns
Secret scanning and leakage prevention workflows
Multi-cloud integration for Vault, AWS, Azure, and GCP
Infrastructure-as-Code secrets management with Terraform
3 GitHub stars
Kubernetes External Secrets Operator configuration

ユースケース

Configuring secure GitHub Actions or GitLab CI/CD pipelines
Setting up automated API key rotation in production environments
Migrating hardcoded environment variables to secure vault storage

概要

主な機能

Automated secret rotation implementation patterns
Secret scanning and leakage prevention workflows
Multi-cloud integration for Vault, AWS, Azure, and GCP
Infrastructure-as-Code secrets management with Terraform
3 GitHub stars
Kubernetes External Secrets Operator configuration

ユースケース

Configuring secure GitHub Actions or GitLab CI/CD pipelines
Setting up automated API key rotation in production environments
Migrating hardcoded environment variables to secure vault storage