How does it handle secret rotation?

The skill provides both automated rotation logic (such as AWS Lambda functions) and manual rotation checklists to ensure credentials stay fresh and secure.

Does this skill support multi-cloud environments?

Yes, it provides implementation patterns for AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and platform-agnostic tools like HashiCorp Vault.

Can it help prevent secrets from being committed to Git?

Absolutely. It includes specific configurations for pre-commit hooks and CI/CD pipeline stages that use TruffleHog to scan for leaked credentials.

Is it compatible with Kubernetes?

Yes, it includes documentation and YAML examples for using the External Secrets Operator to securely sync secrets from external providers into Kubernetes clusters.

Does it provide best practices for GitHub and GitLab?

Yes, it covers native secret handling for both platforms, including environment-specific secrets, protected variables, and log masking.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: kivilaid

bykivilaid

•

Security & Testing

Implements secure handling, storage, and rotation of sensitive credentials across major CI/CD platforms and cloud providers.

This skill empowers Claude to architect and implement robust secrets management strategies within CI/CD pipelines. It provides comprehensive guidance for integrating enterprise-grade tools like HashiCorp Vault and AWS Secrets Manager, alongside native platform solutions like GitHub Secrets and GitLab CI/CD variables. By automating secret rotation, implementing scanning tools like TruffleHog, and enforcing least-privilege access, this skill helps development teams eliminate hardcoded credentials and significantly harden their security posture throughout the automated deployment process.

Key Features

01Kubernetes External Secrets Operator patterns

02Environment-specific credential isolation and masking

03Multi-provider integration (Vault, AWS, Azure, Google Cloud)

04Automated secret rotation workflow implementation

05Pre-commit and CI/CD secret scanning configurations

066 GitHub stars

Use Cases

01Securing database credentials and API keys within GitHub Actions or GitLab CI pipelines

02Automating the rotation of AWS RDS passwords using Secrets Manager and Lambda

03Preventing credential leakage by implementing TruffleHog scanning in pre-commit hooks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add kivilaid/plugin-marketplace secrets-management

For use in Claude.ai and ChatGPT

Download Skill