Is it compatible with GitHub Actions and GitLab CI?

Yes, it features ready-to-use YAML configurations for importing and masking secrets in both GitHub Actions and GitLab CI/CD workflows.

How does this skill prevent secrets from being committed to Git?

The skill provides patterns for implementing pre-commit hooks and CI/CD scanning using tools like TruffleHog, which detect and block secrets before they are pushed to a repository.

Which cloud providers are supported for secrets management?

It includes implementation guidance for AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and platform-agnostic tools like HashiCorp Vault.

Can this skill help with automated secret rotation?

Yes, it provides both manual rotation processes and automated rotation logic using AWS Lambda and other cloud-native services.

Does it support Kubernetes environments?

Absolutely. It includes specific patterns for using the External Secrets Operator to securely sync secrets from external vaults into Kubernetes secrets.

Secrets Management & Security

Name: Secrets Management & Security
Author: Microck

byMicrock

•

114

•

安全与测试

Implements secure practices for handling sensitive credentials and API keys across cloud providers and CI/CD pipelines.

This skill empowers Claude to architect and implement robust secrets management strategies using industry-standard tools like HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault. It provides specific implementation patterns for securing CI/CD environments, automating secret rotation, and integrating with Kubernetes via the External Secrets Operator, ensuring that sensitive data like database passwords and TLS certificates are never hardcoded or exposed in version control.

主要功能

01Multi-provider support for Vault, AWS, Azure, and GCP

02Automated secret rotation logic and implementation

03114 GitHub stars

04CI/CD integration patterns for GitHub Actions and GitLab CI

05Infrastructure as Code patterns for secure credential injection

06Secret scanning integration using TruffleHog and GitGuardian

使用场景

01Implementing automated rotation for rotating cloud infrastructure credentials

02Preventing sensitive data leaks with pre-commit secret scanning hooks

03Securing API keys and database credentials in production CI/CD pipelines

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add microck/ordinary-claude-skills secrets-management

For use in Claude.ai and ChatGPT

Download Skill