Can I use this for Kubernetes deployments?

Yes, it includes specific configurations for the External Secrets Operator to securely sync secrets from external providers into Kubernetes clusters.

Does this skill help prevent hardcoded credentials?

Yes, it provides best practices and implementation guides for secret scanning tools like TruffleHog and external vault integrations to ensure secrets are never committed to Git.

Does it provide guidance on secret rotation?

Absolutely. It covers both automated rotation using serverless functions and manual rotation processes to maintain a high security posture.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: carloscroc

bycarloscroc

배포 및 DevOps

Implements secure secrets handling for CI/CD pipelines using Vault, AWS Secrets Manager, and native platform solutions.

소개

This skill provides Claude with specialized guidance and implementation patterns for securing sensitive credentials within CI/CD workflows. It enables developers to move beyond hardcoded secrets by integrating industry-standard tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. By utilizing this skill, teams can automate secret rotation, implement least-privilege access, and establish robust secret scanning to prevent accidental exposure of API keys, database passwords, and TLS certificates in their repositories.

주요 기능

0 GitHub stars
Native GitHub Actions and GitLab CI secret management configuration
Multi-provider integration for HashiCorp Vault, AWS, Azure, and GCP
Pre-commit and CI-based secret scanning implementation
Kubernetes integration via External Secrets Operator
Automated secret rotation patterns and workflows

사용 사례

Securing production database credentials in a multi-stage deployment pipeline
Migrating from local environment variables to centralized vault-based secrets management
Automating the rotation of API keys using AWS Lambda and Secrets Manager

소개

주요 기능

0 GitHub stars
Native GitHub Actions and GitLab CI secret management configuration
Multi-provider integration for HashiCorp Vault, AWS, Azure, and GCP
Pre-commit and CI-based secret scanning implementation
Kubernetes integration via External Secrets Operator
Automated secret rotation patterns and workflows

사용 사례

Securing production database credentials in a multi-stage deployment pipeline
Migrating from local environment variables to centralized vault-based secrets management
Automating the rotation of API keys using AWS Lambda and Secrets Manager