Can I use this for Kubernetes deployments?

Absolutely. It provides configurations for the External Secrets Operator, allowing you to sync secrets from external providers directly into your Kubernetes clusters securely.

Does this skill help prevent accidental secret commits?

Yes, it includes specific patterns for pre-commit hooks and CI/CD scanning workflows using tools like TruffleHog to detect and block sensitive information before it reaches your repository.

Which secrets management tools are supported by this skill?

This skill supports a wide range of tools including HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native CI/CD platform secrets like GitHub and GitLab.

How does it handle secret rotation?

The skill provides both automated rotation logic (such as AWS Lambda handlers for Secrets Manager) and manual rotation process documentation to ensure credentials remain fresh and secure.

Secure Secrets Management

Name: Secure Secrets Management
Author: HermeticOrmus

byHermeticOrmus

•

部署与 DevOps

Implements secure credential management and automated secret rotation across CI/CD pipelines and cloud providers.

This skill provides specialized patterns and configurations for managing sensitive information without hardcoding credentials into source code. It offers standardized workflows for integrating HashiCorp Vault, AWS Secrets Manager, and native platform solutions like GitHub Secrets and GitLab CI/CD variables. By following these implementation guides, developers can establish robust security practices including least-privilege access, automated secret rotation, and proactive secret scanning to protect their infrastructure and deployment pipelines.

主要功能

01Pre-commit and CI/CD secret scanning workflows using tools like TruffleHog

02Multi-cloud integration for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager

03Kubernetes integration via External Secrets Operator

04Automated secret rotation logic and Infrastructure-as-Code (Terraform) examples

05Centralized secrets management patterns using HashiCorp Vault

064 GitHub stars

使用场景

01Securely injecting database credentials and API keys into GitHub Actions or GitLab pipelines

02Centralizing secrets management across multiple development teams and cloud environments

03Establishing automated rotation for production environment certificates and passwords

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/claude-code-game-development secrets-management

For use in Claude.ai and ChatGPT

Download Skill