Does it include secret scanning for existing leaks?

Yes, it provides setup guides for tools like TruffleHog to detect and block secret leaks during both the local commit phase and the CI/CD pipeline stage.

How does it handle Kubernetes secrets?

It provides configurations for the External Secrets Operator to securely sync secrets from external providers directly into your Kubernetes cluster environments.

Can it help automate secret rotation?

Absolutely. It includes implementation guides for automated rotation using AWS Lambda and HashiCorp Vault to ensure credentials are changed regularly without manual intervention.

Does this skill help prevent hardcoding secrets in Git?

Yes, it provides patterns and best practices for using environment variables and external secret managers to ensure credentials never enter your source code.

Which secret management tools are supported?

The skill includes implementation details for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native GitHub/GitLab secrets.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: HermeticOrmus

byHermeticOrmus

0•

Security & Testing

Implements secure credential handling and secret rotation across major cloud providers and CI/CD platforms to prevent sensitive data leaks.

This skill provides Claude with the expertise to design and implement robust secrets management strategies within CI/CD pipelines. It covers a wide range of industry-standard tools including HashiCorp Vault, AWS Secrets Manager, and native platform solutions like GitHub and GitLab secrets. By following these patterns, developers can automate secret rotation, enforce least-privilege access, and integrate secret scanning tools like TruffleHog to ensure sensitive information never enters version control, significantly reducing the attack surface of automated deployment environments.

Key Features

01Automated secret rotation implementation guides

02Kubernetes External Secrets Operator configuration

030 GitHub stars

04Integration patterns for HashiCorp Vault and AWS Secrets Manager

05Secret scanning and leak prevention using TruffleHog

06Native secret management for GitHub Actions and GitLab CI

Use Cases

01Implementing pre-commit hooks to prevent credential leaks in Git repositories

02Setting up automated rotation for sensitive cloud environment tokens

03Securing database credentials and API keys in automated pipelines

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/hermetic-academy secrets-management

For use in Claude.ai and ChatGPT

Download Skill