Can I use this for automated secret rotation?

Absolutely. The skill includes logic for automated rotation using AWS Lambda as well as standardized manual rotation procedures.

Does this skill support GitHub Actions?

Yes, it provides detailed implementation patterns for securely importing secrets from Vault and AWS Secrets Manager directly into GitHub Actions workflows.

How does this prevent secrets from being committed to Git?

It provides configuration templates for pre-commit hooks and CI/CD stages using tools like TruffleHog to detect and block secrets before they are leaked.

Is HashiCorp Vault integration covered?

Yes, it includes setup guides for Vault dev servers, KV-V2 secrets engine configuration, and authentication patterns for various CI platforms.

Secure Secrets Management

Name: Secure Secrets Management
Author: HermeticOrmus

byHermeticOrmus

部署与 DevOps

Implements robust security protocols for managing sensitive credentials, keys, and certificates across automated CI/CD pipelines.

关于

This skill provides a comprehensive framework for handling sensitive information in modern DevOps workflows. It offers standardized implementation patterns for major providers like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. Users can leverage this skill to automate secret rotation, enforce least-privilege access, and integrate secret scanning tools into their build processes, ensuring that sensitive data never enters version control while remaining accessible to deployment environments.

主要功能

Multi-cloud support for AWS, Azure, GCP, and HashiCorp Vault
0 GitHub stars
CI/CD integration templates for GitHub Actions and GitLab CI
Automated secret rotation patterns and Lambda implementations
Secret scanning configuration for TruffleHog and GitGuardian
Kubernetes integration via External Secrets Operator

使用场景

Preventing secret leakage through pre-commit hooks and CI scanning
Implementing automated API key rotation to meet compliance requirements
Securing production database credentials in automated deployment pipelines

关于

主要功能

Multi-cloud support for AWS, Azure, GCP, and HashiCorp Vault
0 GitHub stars
CI/CD integration templates for GitHub Actions and GitLab CI
Automated secret rotation patterns and Lambda implementations
Secret scanning configuration for TruffleHog and GitGuardian
Kubernetes integration via External Secrets Operator

使用场景

Preventing secret leakage through pre-commit hooks and CI scanning
Implementing automated API key rotation to meet compliance requirements
Securing production database credentials in automated deployment pipelines