Which tools does this skill support?

It supports a wide range of tools including HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native GitHub/GitLab secret stores.

How does it prevent accidental secret leaks?

The skill includes configurations for secret scanning tools like TruffleHog and instructions for setting up pre-commit hooks to block sensitive data before it's pushed.

What is secrets management in CI/CD?

It involves securely storing and accessing sensitive data like API keys and passwords using specialized tools rather than hardcoding them in source code or configuration files.

Does this skill help with secret rotation?

Yes, it provides implementation patterns for both automated cloud-native rotation using Lambda and manual rotation workflows.

Secrets Management & Security

Name: Secrets Management & Security
Author: Activer007

byActiver007

0•

安全与测试

Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, and enterprise cloud solutions.

Provide your Claude instance with a comprehensive framework for managing sensitive credentials, API keys, and certificates across diverse CI/CD environments and cloud platforms. This skill guides users through setting up HashiCorp Vault, AWS Secrets Manager, and native provider secrets while ensuring best practices like rotation, least-privilege access, and automated secret scanning are strictly followed. It is an essential resource for developers and DevOps engineers looking to eliminate hardcoded credentials and harden their deployment pipelines against unauthorized access.

主要功能

01Secret scanning and pre-commit hook integration with TruffleHog

020 GitHub stars

03Automated secret rotation patterns and serverless implementation guides

04Multi-cloud secrets integration for AWS, Azure, GCP, and HashiCorp Vault

05Secure CI/CD configurations for GitHub Actions and GitLab CI

06Kubernetes External Secrets Operator implementation patterns

使用场景

01Securing database credentials and API keys in a production CI/CD pipeline

02Migrating from insecure environment variables to a centralized secret management service

03Implementing automated credential rotation to comply with security audit requirements

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add activer007/ordinary-claude-skills secrets-management

For use in Claude.ai and ChatGPT

Download Skill