How does this skill help prevent secret leaks?

It provides implementation patterns for pre-commit hooks and CI/CD scanning tools like TruffleHog to detect and block secrets before they are ever committed to your repository.

Which cloud-native secret managers are supported?

The skill includes detailed configuration guides and code snippets for AWS Secrets Manager, Azure Key Vault, and Google Secret Manager.

Can I use this for HashiCorp Vault integration?

Yes, it provides comprehensive documentation for setting up Vault servers, managing KV engines, and authenticating via GitHub Actions or GitLab CI.

Does it support Kubernetes secrets?

Yes, it includes patterns for the External Secrets Operator, allowing you to securely sync secrets from external providers directly into Kubernetes Secret objects.

Secrets Management for CI/CD

Name: Secrets Management for CI/CD
Author: wshobson

bywshobson

•

23,194

•

Security & Testing

Implements secure storage, rotation, and management of sensitive credentials across various CI/CD platforms and cloud providers.

This Claude Code Skill provides specialized guidance and implementation patterns for securing sensitive information within your development lifecycle. It helps developers eliminate hardcoded credentials by integrating robust solutions like HashiCorp Vault, AWS Secrets Manager, and native platform tools into CI/CD workflows. The skill emphasizes security best practices, including automated secret rotation, least-privilege access, and proactive scanning, ensuring that your production environment remains protected while maintaining a high velocity of delivery.

Key Features

01Comprehensive HashiCorp Vault setup and CI/CD integration patterns

02Automated secret rotation logic and lifecycle management

03Multi-cloud integration for AWS, Azure, and Google Cloud Secret Managers

04Native GitHub Secrets and GitLab CI/CD variable optimization

05Security scanning implementation with tools like TruffleHog and GitGuardian

0623,194 GitHub stars

Use Cases

01Integrating external secret stores with Kubernetes using the External Secrets Operator

02Securing database credentials and API keys in automated deployment pipelines

03Implementing automated secret rotation to mitigate the impact of credential leaks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add wshobson/agents secrets-management

For use in Claude.ai and ChatGPT

Download Skill