Which secret management tools are supported?

The skill covers HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and platform-native solutions like GitHub and GitLab secrets.

Can I automate secret rotation with this skill?

Yes, it includes implementation patterns for automated rotation using AWS Lambda as well as standardized manual rotation workflows.

How does this skill help prevent secrets from being committed to Git?

It provides configurations for pre-commit hooks and CI/CD jobs using tools like TruffleHog to scan for and block sensitive information before it reaches your repository.

Does it support Kubernetes environments?

Yes, it includes patterns for using the External Secrets Operator to securely sync secrets from external providers into Kubernetes clusters.

CI/CD Secrets Management

Name: CI/CD Secrets Management
Author: HermeticOrmus

byHermeticOrmus

0•

Deployment & DevOps

Manages and secures sensitive credentials, API keys, and certificates across automated CI/CD pipelines and cloud environments.

This Claude Code Skill provides comprehensive patterns and best practices for implementing secure secrets management in modern software development workflows. It offers detailed guidance on integrating industry-standard tools like HashiCorp Vault, AWS Secrets Manager, and native platform solutions for GitHub and GitLab to prevent credential leakage. By emphasizing least-privilege access, automated rotation, and proactive secret scanning, it helps developers build robust, compliant deployment pipelines that protect sensitive data from accidental exposure.

Key Features

010 GitHub stars

02Automated secret rotation patterns and Lambda implementations

03Kubernetes External Secrets Operator implementation patterns

04Multi-platform integration for Vault, AWS, Azure, and GCP

05CI/CD pipeline configuration templates for GitHub and GitLab

06Proactive secret scanning using TruffleHog and Git hooks

Use Cases

01Securing database credentials within GitHub Actions or GitLab CI pipelines

02Centralizing secrets management across multi-cloud environments using HashiCorp Vault

03Implementing automated rotation for cloud provider API keys and certificates

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/floreserlife secrets-management

For use in Claude.ai and ChatGPT

Download Skill