Which secret management tools are supported by this skill?

The skill supports a wide range of tools including HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native platform solutions like GitHub Secrets and GitLab CI/CD variables.

Can this skill help prevent secret leaks in my repository?

Yes, it provides implementation patterns for secret scanning using tools like TruffleHog and pre-commit hooks to detect and block sensitive information before it is committed to your repository.

How does this skill handle Kubernetes secrets?

It includes specific patterns for the External Secrets Operator, allowing you to securely sync secrets from external providers like Vault or AWS directly into Kubernetes Secret objects.

Does it provide guidance on secret rotation?

Yes, it covers both automated rotation processes (using AWS Lambda) and manual rotation workflows to ensure credentials are changed regularly without downtime.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: sla-te

bysla-te

0•

배포 및 DevOps

Implements secure secrets handling, rotation, and integration for modern CI/CD pipelines and cloud environments.

This skill provides comprehensive guidance and implementation patterns for managing sensitive credentials across various platforms, including HashiCorp Vault, AWS Secrets Manager, and native CI/CD secret stores. It helps developers move away from hardcoded secrets by providing ready-to-use configurations for secret rotation, least-privilege access, and automated secret scanning, ensuring a robust security posture throughout the software development lifecycle and across multi-cloud infrastructures.

주요 기능

01HashiCorp Vault setup and automated pipeline integration

020 GitHub stars

03Kubernetes integration via External Secrets Operator

04Pre-commit and CI/CD secret scanning using TruffleHog

05Multi-cloud secret store integration for AWS, Azure, and GCP

06Automated secret rotation and versioning strategies

사용 사례

01Securing database credentials and API keys in GitHub Actions or GitLab CI

02Implementing automated secret rotation for cloud-native applications

03Managing environment-specific secrets in Kubernetes clusters securely

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sla-te/copilot-converter secrets-management

For use in Claude.ai and ChatGPT

Download Skill