How does this skill help prevent secret leaks?

It provides implementation guides for secret scanning tools like TruffleHog and GitGuardian, including pre-commit hooks and CI/CD stages to block leaked credentials.

Which secrets management tools are supported?

This skill supports HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, GitHub Secrets, and GitLab CI/CD variables.

Does it support automated secret rotation?

Yes, it includes specific patterns for automated rotation using AWS Lambda and best practices for manual rotation processes.

Can I use this with Kubernetes?

Yes, it includes configurations for the External Secrets Operator to synchronize secrets from external providers into Kubernetes Secret resources.

Does it include Terraform examples?

Yes, it provides HCL snippets for managing secret versions and retrieving data within Terraform infrastructure-as-code workflows.

CI/CD Secrets Management

Name: CI/CD Secrets Management
Author: amurata

byamurata

•

部署与 DevOps

Implements secure storage, rotation, and access control for sensitive credentials across major CI/CD platforms and cloud providers.

This skill empowers Claude to implement industry-standard secrets management practices within CI/CD pipelines, effectively eliminating hardcoded credentials and mitigating security risks. It provides domain-specific guidance for integrating tools like HashiCorp Vault, AWS Secrets Manager, and native platform solutions, while promoting essential patterns such as automated rotation, least-privilege access, and proactive secret scanning to ensure a robust security posture throughout the software delivery lifecycle.

主要功能

01Automated secret rotation implementation patterns

02Secret scanning and leakage prevention workflows

03Multi-cloud integration for Vault, AWS, Azure, and GCP

04Infrastructure-as-Code secrets management with Terraform

053 GitHub stars

06Kubernetes External Secrets Operator configuration

使用场景

01Configuring secure GitHub Actions or GitLab CI/CD pipelines

02Setting up automated API key rotation in production environments

03Migrating hardcoded environment variables to secure vault storage

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add amurata/cc-tools secrets-management

For use in Claude.ai and ChatGPT

Download Skill