How does it help with CI/CD security?

It includes templates and configurations for safely injecting secrets into GitHub Actions and GitLab CI pipelines while ensuring they remain masked in logs.

Does this skill support multi-cloud environments?

Yes, it provides specific implementation patterns for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager.

Can it help prevent secrets from being committed to Git?

Yes, the skill provides guidance on setting up secret scanning tools like TruffleHog and pre-commit hooks to catch credentials before they are pushed.

Does it cover automated secret rotation?

Yes, the skill includes examples for automated rotation using AWS Lambda and provides a standardized manual rotation process for other environments.

Cloud Secrets Management

Name: Cloud Secrets Management
Author: Activer007

byActiver007

•

セキュリティとテスト

Implements secure handling of credentials and sensitive data within CI/CD pipelines and cloud environments.

概要

This skill provides comprehensive guidance and implementation patterns for managing sensitive information like API keys, database passwords, and TLS certificates. It facilitates the integration of industry-standard tools such as HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault into your development workflow. By following these best practices, developers can implement automated secret rotation, least-privilege access, and robust secret scanning to prevent accidental credential leakage in repository history or build logs.

主な機能

HashiCorp Vault setup and configuration patterns
CI/CD security for GitHub Actions and GitLab CI
Multi-cloud integration for AWS, Azure, and Google Cloud
Automated secret rotation and management workflows
Secret scanning and audit logging best practices
1 GitHub stars

ユースケース

Setting up pre-commit hooks to prevent credential leakage
Securing production database credentials in automated pipelines
Automating API key rotation for third-party service integrations

概要

主な機能

HashiCorp Vault setup and configuration patterns
CI/CD security for GitHub Actions and GitLab CI
Multi-cloud integration for AWS, Azure, and Google Cloud
Automated secret rotation and management workflows
Secret scanning and audit logging best practices
1 GitHub stars

ユースケース

Setting up pre-commit hooks to prevent credential leakage
Securing production database credentials in automated pipelines
Automating API key rotation for third-party service integrations