How does it handle secret rotation?

The skill provides both automated rotation logic (such as AWS Lambda functions) and manual rotation checklists to ensure credentials stay fresh and secure.

Does this skill support multi-cloud environments?

Yes, it provides implementation patterns for AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and platform-agnostic tools like HashiCorp Vault.

Can it help prevent secrets from being committed to Git?

Absolutely. It includes specific configurations for pre-commit hooks and CI/CD pipeline stages that use TruffleHog to scan for leaked credentials.

Is it compatible with Kubernetes?

Yes, it includes documentation and YAML examples for using the External Secrets Operator to securely sync secrets from external providers into Kubernetes clusters.

Does it provide best practices for GitHub and GitLab?

Yes, it covers native secret handling for both platforms, including environment-specific secrets, protected variables, and log masking.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: kivilaid

bykivilaid

•

セキュリティとテスト

Implements secure handling, storage, and rotation of sensitive credentials across major CI/CD platforms and cloud providers.

概要

This skill empowers Claude to architect and implement robust secrets management strategies within CI/CD pipelines. It provides comprehensive guidance for integrating enterprise-grade tools like HashiCorp Vault and AWS Secrets Manager, alongside native platform solutions like GitHub Secrets and GitLab CI/CD variables. By automating secret rotation, implementing scanning tools like TruffleHog, and enforcing least-privilege access, this skill helps development teams eliminate hardcoded credentials and significantly harden their security posture throughout the automated deployment process.

主な機能

Kubernetes External Secrets Operator patterns
Environment-specific credential isolation and masking
Multi-provider integration (Vault, AWS, Azure, Google Cloud)
Automated secret rotation workflow implementation
Pre-commit and CI/CD secret scanning configurations
6 GitHub stars

ユースケース

Securing database credentials and API keys within GitHub Actions or GitLab CI pipelines
Automating the rotation of AWS RDS passwords using Secrets Manager and Lambda
Preventing credential leakage by implementing TruffleHog scanning in pre-commit hooks

概要

主な機能

Kubernetes External Secrets Operator patterns
Environment-specific credential isolation and masking
Multi-provider integration (Vault, AWS, Azure, Google Cloud)
Automated secret rotation workflow implementation
Pre-commit and CI/CD secret scanning configurations
6 GitHub stars

ユースケース

Securing database credentials and API keys within GitHub Actions or GitLab CI pipelines
Automating the rotation of AWS RDS passwords using Secrets Manager and Lambda
Preventing credential leakage by implementing TruffleHog scanning in pre-commit hooks