Does it include secret scanning for existing leaks?

Yes, it provides setup guides for tools like TruffleHog to detect and block secret leaks during both the local commit phase and the CI/CD pipeline stage.

How does it handle Kubernetes secrets?

It provides configurations for the External Secrets Operator to securely sync secrets from external providers directly into your Kubernetes cluster environments.

Can it help automate secret rotation?

Absolutely. It includes implementation guides for automated rotation using AWS Lambda and HashiCorp Vault to ensure credentials are changed regularly without manual intervention.

Does this skill help prevent hardcoding secrets in Git?

Yes, it provides patterns and best practices for using environment variables and external secret managers to ensure credentials never enter your source code.

Which secret management tools are supported?

The skill includes implementation details for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native GitHub/GitLab secrets.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: HermeticOrmus

byHermeticOrmus

セキュリティとテスト

Implements secure credential handling and secret rotation across major cloud providers and CI/CD platforms to prevent sensitive data leaks.

概要

This skill provides Claude with the expertise to design and implement robust secrets management strategies within CI/CD pipelines. It covers a wide range of industry-standard tools including HashiCorp Vault, AWS Secrets Manager, and native platform solutions like GitHub and GitLab secrets. By following these patterns, developers can automate secret rotation, enforce least-privilege access, and integrate secret scanning tools like TruffleHog to ensure sensitive information never enters version control, significantly reducing the attack surface of automated deployment environments.

主な機能

Automated secret rotation implementation guides
Kubernetes External Secrets Operator configuration
0 GitHub stars
Integration patterns for HashiCorp Vault and AWS Secrets Manager
Secret scanning and leak prevention using TruffleHog
Native secret management for GitHub Actions and GitLab CI

ユースケース

Implementing pre-commit hooks to prevent credential leaks in Git repositories
Setting up automated rotation for sensitive cloud environment tokens
Securing database credentials and API keys in automated pipelines

概要

主な機能

Automated secret rotation implementation guides
Kubernetes External Secrets Operator configuration
0 GitHub stars
Integration patterns for HashiCorp Vault and AWS Secrets Manager
Secret scanning and leak prevention using TruffleHog
Native secret management for GitHub Actions and GitLab CI

ユースケース

Implementing pre-commit hooks to prevent credential leaks in Git repositories
Setting up automated rotation for sensitive cloud environment tokens
Securing database credentials and API keys in automated pipelines