How does it help prevent secrets from being leaked to Git?

It includes configurations for pre-commit hooks and CI/CD security stages using tools like TruffleHog to detect and block sensitive information before it reaches your repository.

Is there support for Kubernetes?

Yes, the skill provides patterns for the External Secrets Operator, allowing you to securely sync secrets from external providers directly into Kubernetes Secret resources.

Does this skill support GitHub Actions and GitLab CI?

Yes, it includes specialized templates and configuration patterns for both GitHub Actions and GitLab CI, covering native platform secrets as well as external vault integrations.

Can I automate secret rotation with this skill?

Absolutely. The skill provides specific implementation guides for automated rotation using AWS Lambda and manual rotation workflows for other environments.

CI/CD Secrets Management

Name: CI/CD Secrets Management
Author: lifangda

bylifangda

•

Deployment & DevOps

Secures sensitive credentials and automates secret rotation within CI/CD pipelines using industry-standard tools like HashiCorp Vault and AWS Secrets Manager.

This skill provides a comprehensive framework for implementing enterprise-grade secrets management across various cloud platforms and CI/CD tools. It enables developers to move away from hardcoded credentials by providing implementation patterns for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. By focusing on secret rotation, least-privilege access, and automated scanning, this skill ensures that API keys, database passwords, and TLS certificates remain secure throughout the software delivery lifecycle.

Key Features

01Production-ready templates for GitHub Actions and GitLab CI/CD

02Security auditing and automated secret scanning with TruffleHog

03Multi-cloud support for AWS, Azure, GCP, and HashiCorp Vault integration

04Kubernetes integration via External Secrets Operator (ESO)

0516 GitHub stars

06Automated secret rotation patterns and implementation workflows

Use Cases

01Implementing automated rotation for production database credentials

02Setting up secure pre-commit hooks to prevent credential leakage

03Migrating from hardcoded environment variables to centralized secrets management

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add lifangda/claude-plugins secrets-management

For use in Claude.ai and ChatGPT

Download Skill