Does it provide Infrastructure as Code (IaC) examples?

Yes, the skill includes Terraform snippets for managing AWS Secrets Manager and Kubernetes manifests for the External Secrets Operator.

How does it handle secret rotation?

It provides both standardized manual rotation processes and automated rotation patterns using serverless functions like AWS Lambda to ensure credentials are refreshed regularly.

What secret management tools are supported by this skill?

This skill supports a wide range of tools including HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native secrets for GitHub Actions and GitLab CI.

Can this skill help me prevent credentials from being committed to Git?

Yes, it provides implementation patterns for secret scanning using tools like TruffleHog and configuration for pre-commit hooks to block sensitive data before it reaches your repository.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: EngineerWithAI

byEngineerWithAI

0•

배포 및 DevOps

Implements robust secrets management and security best practices for CI/CD pipelines using Vault, AWS Secrets Manager, and native platform solutions.

The Secrets Management skill provides comprehensive guidance for securing sensitive credentials within automated workflows. It helps developers eliminate hardcoded secrets by implementing professional-grade integrations with HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. By offering production-ready templates for GitHub Actions and GitLab CI, automated rotation strategies, and secret scanning patterns, this skill ensures that your deployment pipelines remain secure, compliant, and follow the principle of least privilege.

주요 기능

01Advanced HashiCorp Vault integration for dynamic secrets and audit logging

02Kubernetes integration via External Secrets Operator and SecretStore

03Multi-cloud support for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager

04Automated secret rotation patterns using AWS Lambda and native tools

050 GitHub stars

06Security scanning implementation with TruffleHog and pre-commit hooks

사용 사례

01Securing database credentials and API keys across development, staging, and production environments

02Configuring secure secret injection for Kubernetes-based applications using external providers

03Implementing automated rotation for high-security environments to meet compliance standards

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add engineerwithai/engineerwith-agents secrets-management

For use in Claude.ai and ChatGPT

Download Skill