This skill provides specialized guidance for securing sensitive information like API keys, database passwords, and TLS certificates without risking exposure in source code. It offers production-ready implementation patterns for HashiCorp Vault, AWS Secrets Manager, and native platform solutions, integrating security directly into your DevOps workflows. By leveraging this skill, developers can implement automated secret rotation, secret scanning, and the principle of least privilege across GitHub Actions, GitLab CI, and Kubernetes environments, ensuring infrastructure remains compliant and secure.
主要功能
01HashiCorp Vault and AWS Secrets Manager integration patterns
02Secret scanning implementation using TruffleHog and GitGuardian
03Automated secret rotation and dynamic credential generation
04Kubernetes External Secrets Operator configuration
05Secure CI/CD variable masking and environment protection
061 GitHub stars
