Does it support automated secret rotation?

Yes, the skill provides code examples and architectural logic for automating the rotation of credentials for databases and third-party APIs.

Is it compatible with GitHub Actions?

Absolutely, it includes specific workflow snippets for importing, using, and masking secrets within GitHub Actions runners.

How does this skill help prevent secret leakage?

It provides implementation patterns for using dedicated secret managers and scanning tools like TruffleHog to ensure credentials never enter version control.

Can I use this for Kubernetes environments?

Yes, it includes specialized configurations for the External Secrets Operator to securely sync external secrets into Kubernetes Secret objects.

Which secret management tools are supported?

The skill covers HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native platform solutions like GitHub Secrets.

Secure Secrets Management

Name: Secure Secrets Management
Author: HermeticOrmus

byHermeticOrmus

セキュリティとテスト

Implements robust security protocols for managing sensitive credentials, keys, and certificates within CI/CD pipelines.

概要

This skill provides specialized guidance for architecting and implementing secure secrets management across modern CI/CD ecosystems. It enables developers to integrate industrial-grade tools like HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault while adhering to industry best practices such as secret rotation, least-privilege access, and automated secret scanning. By replacing high-risk hardcoded credentials with dynamic retrieval patterns and environment-specific variables, this skill significantly reduces the attack surface and enhances the overall security posture of automated deployment workflows.

主な機能

Secret scanning and pre-commit hook enforcement
Multi-cloud integration for AWS, Azure, GCP, and HashiCorp Vault
Automated secret rotation implementation patterns
0 GitHub stars
CI/CD provider-specific configuration for GitHub and GitLab
Kubernetes integration via External Secrets Operator

ユースケース

Syncing cloud-native secrets into Kubernetes clusters securely
Implementing automated rotation for production database passwords using Lambda
Securing API keys and database credentials in GitHub Actions or GitLab CI

概要

主な機能

Secret scanning and pre-commit hook enforcement
Multi-cloud integration for AWS, Azure, GCP, and HashiCorp Vault
Automated secret rotation implementation patterns
0 GitHub stars
CI/CD provider-specific configuration for GitHub and GitLab
Kubernetes integration via External Secrets Operator

ユースケース

Syncing cloud-native secrets into Kubernetes clusters securely
Implementing automated rotation for production database passwords using Lambda
Securing API keys and database credentials in GitHub Actions or GitLab CI