Secrets Management for CI/CD

About

This skill provides a comprehensive framework for managing sensitive information in automated pipelines, ensuring that API keys, database passwords, and TLS certificates are never hardcoded or exposed. It offers standardized implementation patterns for industry-leading tools like HashiCorp Vault, AWS Secrets Manager, and GitHub Secrets, alongside advanced techniques for automated secret rotation and security scanning to maintain a robust security posture throughout the software development lifecycle.

Key Features

• Integration patterns for HashiCorp Vault, AWS, Azure, and Google Cloud
• Security scanning setup using TruffleHog to prevent secret leaks
• CI/CD workflow configurations for GitHub Actions and GitLab CI
• 0 GitHub stars
• Automated secret rotation scripts and AWS Lambda handlers
• Kubernetes integration via External Secrets Operator

Use Cases

• Securing API keys within GitHub Actions and GitLab CI/CD pipelines
• Syncing cloud-based secrets to Kubernetes clusters securely
• Automating database credential rotation in production environments