Does it provide Infrastructure as Code (IaC) examples?

Yes, the skill includes Terraform snippets for managing AWS Secrets Manager and Kubernetes manifests for the External Secrets Operator.

How does it handle secret rotation?

It provides both standardized manual rotation processes and automated rotation patterns using serverless functions like AWS Lambda to ensure credentials are refreshed regularly.

What secret management tools are supported by this skill?

This skill supports a wide range of tools including HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native secrets for GitHub Actions and GitLab CI.

Can this skill help me prevent credentials from being committed to Git?

Yes, it provides implementation patterns for secret scanning using tools like TruffleHog and configuration for pre-commit hooks to block sensitive data before it reaches your repository.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: EngineerWithAI

byEngineerWithAI

Deployment & DevOps

Implements robust secrets management and security best practices for CI/CD pipelines using Vault, AWS Secrets Manager, and native platform solutions.

About

The Secrets Management skill provides comprehensive guidance for securing sensitive credentials within automated workflows. It helps developers eliminate hardcoded secrets by implementing professional-grade integrations with HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. By offering production-ready templates for GitHub Actions and GitLab CI, automated rotation strategies, and secret scanning patterns, this skill ensures that your deployment pipelines remain secure, compliant, and follow the principle of least privilege.

Key Features

Advanced HashiCorp Vault integration for dynamic secrets and audit logging
Kubernetes integration via External Secrets Operator and SecretStore
Multi-cloud support for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager
Automated secret rotation patterns using AWS Lambda and native tools
0 GitHub stars
Security scanning implementation with TruffleHog and pre-commit hooks

Use Cases

Securing database credentials and API keys across development, staging, and production environments
Configuring secure secret injection for Kubernetes-based applications using external providers
Implementing automated rotation for high-security environments to meet compliance standards

About

Key Features

Advanced HashiCorp Vault integration for dynamic secrets and audit logging
Kubernetes integration via External Secrets Operator and SecretStore
Multi-cloud support for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager
Automated secret rotation patterns using AWS Lambda and native tools
0 GitHub stars
Security scanning implementation with TruffleHog and pre-commit hooks

Use Cases

Securing database credentials and API keys across development, staging, and production environments
Configuring secure secret injection for Kubernetes-based applications using external providers
Implementing automated rotation for high-security environments to meet compliance standards