How does this skill help prevent secret leaks?

It provides implementation patterns for pre-commit hooks and CI/CD scanning tools like TruffleHog to detect and block secrets before they are ever committed to your repository.

Which cloud-native secret managers are supported?

The skill includes detailed configuration guides and code snippets for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager.

Can I use this for HashiCorp Vault integration?

Yes, it provides comprehensive documentation for setting up Vault servers, managing KV engines, and authenticating via GitHub Actions or GitLab CI.

Does it support Kubernetes secrets?

Yes, it includes patterns for the External Secrets Operator, allowing you to securely sync secrets from external providers directly into Kubernetes Secret objects.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: wshobson

bywshobson

•

23,194

Security & Testing

Implements secure storage, rotation, and management of sensitive credentials across various CI/CD platforms and cloud providers.

About

This Claude Code Skill provides specialized guidance and implementation patterns for securing sensitive information within your development lifecycle. It helps developers eliminate hardcoded credentials by integrating robust solutions like HashiCorp Vault, AWS Secrets Manager, and native platform tools into CI/CD workflows. The skill emphasizes security best practices, including automated secret rotation, least-privilege access, and proactive scanning, ensuring that your production environment remains protected while maintaining a high velocity of delivery.

Key Features

Comprehensive HashiCorp Vault setup and CI/CD integration patterns
Automated secret rotation logic and lifecycle management
Multi-cloud integration for AWS, Azure, and Google Cloud Secret Managers
Native GitHub Secrets and GitLab CI/CD variable optimization
Security scanning implementation with tools like TruffleHog and GitGuardian
23,194 GitHub stars

Use Cases

Integrating external secret stores with Kubernetes using the External Secrets Operator
Securing database credentials and API keys in automated deployment pipelines
Implementing automated secret rotation to mitigate the impact of credential leaks

About

Key Features

Comprehensive HashiCorp Vault setup and CI/CD integration patterns
Automated secret rotation logic and lifecycle management
Multi-cloud integration for AWS, Azure, and Google Cloud Secret Managers
Native GitHub Secrets and GitLab CI/CD variable optimization
Security scanning implementation with tools like TruffleHog and GitGuardian
23,194 GitHub stars

Use Cases

Integrating external secret stores with Kubernetes using the External Secrets Operator
Securing database credentials and API keys in automated deployment pipelines
Implementing automated secret rotation to mitigate the impact of credential leaks