Can this skill automate secret rotation?

Yes, it includes implementation logic for automated rotation using AWS Lambda as well as standardized manual rotation processes.

Is it compatible with Kubernetes?

Yes, it provides specific configurations for the External Secrets Operator to securely sync secrets from external providers into Kubernetes clusters.

Does this skill help prevent secrets from being committed to Git?

Yes, it includes patterns for pre-commit hooks and CI/CD secret scanning using tools like TruffleHog to block and detect sensitive data leaks.

Which secret managers are supported?

The skill provides guidance for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native GitHub/GitLab CI/CD variables.

Secrets Management & Security

Name: Secrets Management & Security
Author: rootcastleco

byrootcastleco

•

安全与测试

Implement secure credential handling and automated secret rotation across CI/CD pipelines and cloud environments.

This skill provides a comprehensive framework for managing sensitive information like API keys, database passwords, and TLS certificates without hardcoding them in source control. It offers standardized implementation patterns for HashiCorp Vault, AWS Secrets Manager, and native CI/CD secret stores, enabling developers to automate secret rotation, enforce least-privilege access, and integrate security scanning tools like TruffleHog to prevent data leaks throughout the software development lifecycle.

主要功能

01Automated secret rotation patterns and implementation guides

02CI/CD integration for GitHub Actions, GitLab CI, and Kubernetes

03Multi-cloud support for AWS, Azure, GCP, and HashiCorp Vault

04Integrated secret scanning to detect and prevent leaked credentials

05Least-privilege access models and audit logging configurations

062 GitHub stars

使用场景

01Automating the rotation of sensitive certificates and access tokens

02Integrating HashiCorp Vault with Kubernetes using External Secrets Operator

03Securing database credentials and API keys in production CI/CD pipelines

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add rootcastleco/rei-skills secrets-management

For use in Claude.ai and ChatGPT

主要功能

01Automated secret rotation patterns and implementation guides

02CI/CD integration for GitHub Actions, GitLab CI, and Kubernetes

03Multi-cloud support for AWS, Azure, GCP, and HashiCorp Vault

04Integrated secret scanning to detect and prevent leaked credentials

05Least-privilege access models and audit logging configurations

062 GitHub stars

使用场景

01Automating the rotation of sensitive certificates and access tokens

02Integrating HashiCorp Vault with Kubernetes using External Secrets Operator

03Securing database credentials and API keys in production CI/CD pipelines

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add rootcastleco/rei-skills secrets-management

For use in Claude.ai and ChatGPT