Can I use this for automated secret rotation?

Absolutely. The skill includes logic for automated rotation using AWS Lambda as well as standardized manual rotation procedures.

Does this skill support GitHub Actions?

Yes, it provides detailed implementation patterns for securely importing secrets from Vault and AWS Secrets Manager directly into GitHub Actions workflows.

How does this prevent secrets from being committed to Git?

It provides configuration templates for pre-commit hooks and CI/CD stages using tools like TruffleHog to detect and block secrets before they are leaked.

Is HashiCorp Vault integration covered?

Yes, it includes setup guides for Vault dev servers, KV-V2 secrets engine configuration, and authentication patterns for various CI platforms.

Secure Secrets Management

Name: Secure Secrets Management
Author: HermeticOrmus

byHermeticOrmus

0•

部署与 DevOps

Implements robust security protocols for managing sensitive credentials, keys, and certificates across automated CI/CD pipelines.

This skill provides a comprehensive framework for handling sensitive information in modern DevOps workflows. It offers standardized implementation patterns for major providers like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. Users can leverage this skill to automate secret rotation, enforce least-privilege access, and integrate secret scanning tools into their build processes, ensuring that sensitive data never enters version control while remaining accessible to deployment environments.

主要功能

01Multi-cloud support for AWS, Azure, GCP, and HashiCorp Vault

020 GitHub stars

03CI/CD integration templates for GitHub Actions and GitLab CI

04Automated secret rotation patterns and Lambda implementations

05Secret scanning configuration for TruffleHog and GitGuardian

06Kubernetes integration via External Secrets Operator

使用场景

01Preventing secret leakage through pre-commit hooks and CI scanning

02Implementing automated API key rotation to meet compliance requirements

03Securing production database credentials in automated deployment pipelines

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/hermetic-academy secrets-management

For use in Claude.ai and ChatGPT

Download Skill