How does this skill help with CI/CD security?

It provides templates and best-practice patterns for injecting secrets into pipelines from secure external stores like Vault or AWS without hardcoding them in source code.

Which cloud providers are supported?

The skill covers major providers including AWS Secrets Manager, Azure Key Vault, Google Secret Manager, as well as platform-native solutions for GitHub and GitLab.

Does it support Kubernetes secret integration?

Yes, it includes implementation patterns for the External Secrets Operator to securely sync secrets from external providers into Kubernetes clusters.

Can Claude generate secret rotation scripts with this skill?

Absolutely, it provides ready-to-use patterns for automated rotation using AWS Lambda and outlines manual rotation processes for legacy systems.

Can it help prevent secrets from being committed to Git?

Yes, it includes specific guidance on setting up secret scanning tools like TruffleHog and GitGuardian as pre-commit hooks and CI/CD check stages.

Secure Secrets Management

Name: Secure Secrets Management
Author: Activer007

byActiver007

0•

セキュリティとテスト

Implements robust secrets management workflows and security best practices for CI/CD pipelines and cloud environments.

This skill provides Claude with domain-specific knowledge to implement secure handling of sensitive data across various platforms, including HashiCorp Vault, AWS Secrets Manager, and native CI/CD secret stores. It enables the generation of secure configuration patterns, automated secret rotation scripts, and secret scanning implementations to prevent accidental exposure in repositories. Whether you are setting up least-privilege access or integrating external secrets with Kubernetes, this skill ensures your sensitive credentials remain protected throughout the software development lifecycle.

主な機能

01Secret scanning setup to prevent credential leakage

020 GitHub stars

03CI/CD pipeline configuration for secure secret injection

04Automated secret rotation patterns and Lambda implementations

05Multi-platform support for Vault, AWS, Azure, GCP, GitHub, and GitLab

06Infrastructure as Code (Terraform) integration for secrets

ユースケース

01Setting up pre-commit hooks and CI jobs to scan for leaked secrets using TruffleHog

02Implementing automated password rotation for RDS databases using AWS Secrets Manager

03Configuring a secure GitHub Actions pipeline to fetch credentials from HashiCorp Vault

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add activer007/ordinary-claude-skills secrets-management

For use in Claude.ai and ChatGPT

Download Skill