How does this skill prevent hardcoded secrets?

The skill provides patterns for externalizing sensitive data to dedicated secret managers and implementing pre-commit hooks that scan for credentials before they are pushed to a repository.

Does this support multi-cloud environments?

Yes, it includes implementation guides for HashiCorp Vault (cloud-agnostic), AWS Secrets Manager, Azure Key Vault, and Google Secret Manager.

Can I use this for Kubernetes secret management?

Absolutely. It features specific configurations for the External Secrets Operator to securely sync data from external vaults into Kubernetes Secret objects.

What tools are used for secret scanning?

The skill focuses on integrating tools like TruffleHog and GitGuardian into your CI/CD pipelines and local development environment to detect leaks early.

Secrets Management

Name: Secrets Management
Author: Activer007

byActiver007

セキュリティとテスト

Implements secure storage, automated rotation, and least-privilege access for credentials and sensitive data across CI/CD pipelines.

概要

This skill provides comprehensive guidance for securing sensitive information like API keys, database passwords, and TLS certificates without hardcoding them in source control. It offers production-grade implementation patterns for industry-standard tools including HashiCorp Vault, AWS Secrets Manager, and native CI/CD platform secret stores. By integrating this skill, developers can automate secret rotation, enforce audit logging, and implement proactive secret scanning to ensure high-security standards throughout the software development lifecycle.

主な機能

Multi-provider integration for Vault, AWS, Azure, and Google Cloud
Automated secret rotation workflows using serverless functions
0 GitHub stars
Secret scanning implementation with TruffleHog and pre-commit hooks
Kubernetes integration via External Secrets Operator
Native CI/CD secret configuration for GitHub Actions and GitLab CI

ユースケース

Implementing automated TLS certificate rotation and distribution
Securing database and API credentials in automated deployment pipelines
Enforcing zero-trust security for Kubernetes application configurations

概要

主な機能

Multi-provider integration for Vault, AWS, Azure, and Google Cloud
Automated secret rotation workflows using serverless functions
0 GitHub stars
Secret scanning implementation with TruffleHog and pre-commit hooks
Kubernetes integration via External Secrets Operator
Native CI/CD secret configuration for GitHub Actions and GitLab CI

ユースケース

Implementing automated TLS certificate rotation and distribution
Securing database and API credentials in automated deployment pipelines
Enforcing zero-trust security for Kubernetes application configurations