Is it compatible with Infrastructure as Code (IaC)?

Yes, it includes examples of how to securely retrieve secrets using Terraform data sources for secure infrastructure provisioning.

Can I use this for Kubernetes secret management?

Yes, it includes implementation details for the External Secrets Operator to sync secrets from external providers into Kubernetes clusters.

What tools does this secrets management skill support?

It covers HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native CI/CD secret stores like GitHub and GitLab.

Does it help prevent accidental secret leaks in git?

Absolutely. It includes patterns for pre-commit secret scanning with TruffleHog and best practices for masking secrets in CI/CD logs.

How do I handle secret rotation with this skill?

The skill provides both automated rotation logic (e.g., using AWS Lambda) and manual rotation processes to ensure credentials are changed regularly.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: Activer007

byActiver007

•

安全与测试

Implements secure storage, rotation, and retrieval of sensitive credentials across major CI/CD platforms and cloud providers.

This skill provides comprehensive guidance and implementation patterns for managing secrets within modern development workflows. It covers industry-standard tools like HashiCorp Vault and cloud-native services such as AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. Users can leverage this skill to eliminate hardcoded credentials, automate secret rotation, implement least-privilege access, and integrate secret scanning into their pipelines, ensuring that API keys, database passwords, and TLS certificates remain secure throughout the software development lifecycle.

主要功能

01Multi-platform support for GitHub Actions, GitLab CI, and Kubernetes integration

02Pre-commit and CI/CD secret scanning using tools like TruffleHog

035 GitHub stars

04Security best practices including masking, encryption, and audit logging

05Integration patterns for HashiCorp Vault and major cloud secret managers

06Automated secret rotation logic and manual rotation workflows

使用场景

01Migrating from hardcoded environment variables to centralized secrets management

02Securing database credentials and API keys in automated deployment pipelines

03Implementing automated rotation for high-security cloud infrastructure

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add activer007/ordinary-claude-skills secrets-management

For use in Claude.ai and ChatGPT

Download Skill