Can I automate secret rotation with this skill?

Yes, it covers automated rotation patterns using AWS Lambda and manual rotation processes to help maintain high security standards and compliance.

What is secrets management in CI/CD?

Secrets management is the practice of using specialized tools to store and inject sensitive data like API keys and passwords into automation pipelines, ensuring they are never hardcoded in the repository.

How do I prevent secrets from being committed to Git?

The skill includes guidance on using secret scanning tools like TruffleHog as pre-commit hooks or CI/CD steps to detect and block secrets before they enter the codebase.

Does this skill support AWS Secrets Manager?

Yes, it provides implementation patterns for AWS Secrets Manager, including CLI usage, GitHub Actions integration, and Terraform data source examples.

CI/CD Secrets Management

Name: CI/CD Secrets Management
Author: HermeticOrmus

byHermeticOrmus

0•

部署与 DevOps

Implements secure credential handling and automated rotation patterns for CI/CD pipelines using Vault, AWS Secrets Manager, and native platform tools.

This skill provides specialized guidance for securing sensitive information within automated deployment workflows. It offers implementation patterns for industry-standard tools like HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault, ensuring that API keys, database credentials, and certificates are never hardcoded in source control. By incorporating secret scanning, automated rotation, and least-privilege access controls, this skill enables developers to build secure, production-grade CI/CD pipelines that mitigate the risk of credential leakage and comply with security best practices.

主要功能

01Automated secret rotation logic for cloud-native services

02Pre-commit and CI/CD secret scanning configuration using TruffleHog

030 GitHub stars

04Native secret management for GitHub Actions and GitLab CI/CD

05Kubernetes integration via External Secrets Operator

06Integration patterns for HashiCorp Vault, AWS, Azure, and Google Secret Manager

使用场景

01Implementing automated password rotation for AWS RDS instances

02Securing database credentials and API keys in GitHub Actions or GitLab CI

03Synchronizing centralized Vault secrets with Kubernetes clusters

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/floraheritage secrets-management

For use in Claude.ai and ChatGPT

Download Skill