Is Kubernetes supported?

Yes, it includes configurations for the External Secrets Operator to securely sync secrets from external providers into Kubernetes clusters.

Why use a secret manager instead of standard environment variables?

Secret managers provide centralized auditing, versioning, fine-grained access control, and automatic rotation which standard environment variables cannot provide.

How does this skill help prevent secret leaks?

It provides patterns for secret scanning using tools like TruffleHog and mandates instructions for using secure backends instead of hardcoding values in source control.

Can I use this with GitHub Actions?

Yes, it includes specific configuration examples for securely importing secrets from Vault and AWS into GitHub Actions environments.

Does it support automated rotation?

Yes, the skill covers automated rotation logic for AWS Secrets Manager using Lambda functions and provides manual rotation best practices.

Secrets Management

Name: Secrets Management
Author: lingxling

bylingxling

•

보안 및 테스팅

Implements secure secret storage and automated rotation for CI/CD pipelines using HashiCorp Vault, AWS, and modern DevOps tools.

This skill provides comprehensive guidance and implementation patterns for managing sensitive credentials across the entire development lifecycle. It offers ready-to-use configurations for HashiCorp Vault, AWS Secrets Manager, and CI/CD platforms like GitHub Actions and GitLab. By automating secret rotation, implementing least-privilege access, and integrating secret scanning tools like TruffleHog, it helps developers eliminate hardcoded secrets and maintain a robust security posture within their cloud infrastructure and Kubernetes environments.

주요 기능

01Deep integration with HashiCorp Vault for dynamic secret generation

02Kubernetes integration using the External Secrets Operator

03Multi-cloud support for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager

04Automated secret rotation patterns and Lambda implementation templates

05Secret scanning workflows to prevent accidental credential leaks

0639 GitHub stars

사용 사례

01Automating the lifecycle and rotation of SSL/TLS certificates

02Securing database credentials and API keys in production deployment pipelines

03Implementing least-privilege access controls for cloud infrastructure services

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add lingxling/awesome-skills-cn secrets-management

For use in Claude.ai and ChatGPT

주요 기능

01Deep integration with HashiCorp Vault for dynamic secret generation

02Kubernetes integration using the External Secrets Operator

03Multi-cloud support for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager

04Automated secret rotation patterns and Lambda implementation templates

05Secret scanning workflows to prevent accidental credential leaks

0639 GitHub stars

사용 사례

01Automating the lifecycle and rotation of SSL/TLS certificates

02Securing database credentials and API keys in production deployment pipelines

03Implementing least-privilege access controls for cloud infrastructure services

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add lingxling/awesome-skills-cn secrets-management

For use in Claude.ai and ChatGPT