Which secret management tools are supported by this skill?

This skill provides guidance and implementation patterns for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native secrets for GitHub and GitLab.

Can this skill help with automated secret rotation?

Yes, it includes specific implementation logic for automated rotation using AWS Lambda as well as standard manual rotation procedures for various environments.

Does it support Kubernetes environments?

Yes, the skill covers Kubernetes integration using the External Secrets Operator to sync secrets from external providers directly into your clusters.

How does it handle secret leakage prevention?

The skill includes configurations for secret scanning tools like TruffleHog, including pre-commit hooks and CI/CD scanning steps to detect and block secret leaks.

Secure Secrets Management

Name: Secure Secrets Management
Author: Microck

byMicrock

•

部署与 DevOps

Implements secure secrets management and automated rotation for CI/CD pipelines and cloud infrastructure.

关于

The Secure Secrets Management skill provides comprehensive guidance on handling sensitive information like API keys, database credentials, and TLS certificates without risking exposure. It offers implementation patterns for centralized tools like HashiCorp Vault, cloud-native services like AWS Secrets Manager, and platform-specific solutions for GitHub and GitLab. This skill is essential for DevOps engineers and developers who need to implement automated secret rotation, least-privilege access controls, and proactive secret scanning to ensure a robust security posture across their entire development lifecycle.

主要功能

Pre-commit and CI/CD secret scanning configurations using TruffleHog
Integration patterns for HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault
Automated secret rotation workflows using AWS Lambda and manual processes
81 GitHub stars
Native secret injection templates for GitHub Actions and GitLab CI/CD
Kubernetes orchestration using the External Secrets Operator

使用场景

Preventing accidental credential leaks with integrated git hooks and scanning
Automating the periodic rotation of infrastructure passwords and API tokens
Securely injecting sensitive credentials into production deployment pipelines

关于

主要功能

Pre-commit and CI/CD secret scanning configurations using TruffleHog
Integration patterns for HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault
Automated secret rotation workflows using AWS Lambda and manual processes
81 GitHub stars
Native secret injection templates for GitHub Actions and GitLab CI/CD
Kubernetes orchestration using the External Secrets Operator

使用场景

Preventing accidental credential leaks with integrated git hooks and scanning
Automating the periodic rotation of infrastructure passwords and API tokens
Securely injecting sensitive credentials into production deployment pipelines