How does this skill help prevent secret leaks?

It provides patterns for pre-commit hooks and CI/CD scanning using tools like TruffleHog, ensuring sensitive data is never committed to your repository.

Does it cover automated secret rotation?

Yes, it provides specific implementation logic for automated rotation using AWS Lambda and general manual rotation best practices.

What tools does the Secrets Management skill support?

It supports a wide range of tools including HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native CI/CD variables for GitHub and GitLab.

Can I use this for Kubernetes environments?

Yes, it includes implementation guides for the External Secrets Operator to securely sync secrets from external providers into Kubernetes clusters.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: Activer007

byActiver007

0•

Security & Testing

Implements secure secrets handling and rotation for CI/CD pipelines using Vault, AWS, and native cloud solutions.

This skill provides specialized guidance for implementing robust secrets management across various platforms, including HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. It helps developers move away from hardcoded credentials by providing standardized patterns for secret rotation, least-privilege access, and secure integration with CI/CD tools like GitHub Actions and GitLab CI. It is particularly useful when architecting secure deployment pipelines that require dynamic secrets, certificate management, or automated scanning to prevent credential leaks.

Key Features

01Secret scanning and pre-commit hook implementation

02Kubernetes External Secrets Operator integration

03Multi-platform integration (Vault, AWS, Azure, GCP)

04Automated secret rotation patterns

05CI/CD provider-specific configurations for GitHub and GitLab

060 GitHub stars

Use Cases

01Implementing secret scanning to prevent sensitive data leaks in git repositories

02Setting up automated secret rotation with AWS Lambda and Secrets Manager

03Securing API keys and database credentials in GitHub Actions

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add activer007/ordinary-claude-skills secrets-management

For use in Claude.ai and ChatGPT

Download Skill