skills.rest
williamzujkowski
williamzujkowskiCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

secrets-management

Manage secrets across development, CI/CD, and production workflows.

17|1|Updated Jun 8, 2025
Search Tags:#automation#security#secrets#vault#environment-variables#data-protection#devsecops#azure-key-vault#aws-secrets-manager
One-click install
npx skills add https://github.com/williamzujkowski/standards --skill secrets-management
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/williamzujkowski/standards/tree/main/skills/security/secrets-management
Command: npx skills add https://github.com/williamzujkowski/standards --skill secrets-management

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill provides best practices for securely storing, accessing, and rotating sensitive information, preventing data breaches and unauthorized access. It automates the management of API keys, database credentials, and other secrets, reducing the risk of exposure in both development and production environments.

Core Features & Use Cases

  • Centralized Secret Storage: Guides on using tools like HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault.
  • Automated Secret Rotation: Teaches how to automatically rotate credentials to minimize the impact of compromise.
  • Developer Workflow Integration: Provides pre-commit hooks and environment variable patterns to prevent accidental secret exposure.
  • Use Case: Set up secrets management for a new application, automatically generating an .env.example file, a Vault configuration template, and a pre-commit hook to detect hardcoded secrets.

Quick Start

Generate an .env.example file and a pre-commit hook configuration to prevent committing sensitive API keys.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent secrets like API keys and passwords from being committed to version control?▼

Use pre-commit hooks to detect hardcoded secrets before they're committed. This Skill provides pre-commit configurations that scan for API keys, database credentials, and other sensitive data, blocking commits that contain exposed secrets and reducing breach risk.

What's the best way to manage secrets across development, CI/CD, and production environments?▼

Centralize secret storage using tools like HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault, then integrate them into your deployment pipelines. This Skill covers setup, access controls, audit logging, and encryption in transit and at rest for each environment.

How do I automatically rotate credentials to minimize the impact of a compromise?▼

Automated secret rotation policies reduce exposure time by regularly cycling credentials. This Skill teaches rotation setup with policy-based access controls and least-privilege enforcement to satisfy NIST 800-53r5 SC-12 compliance requirements.

Can I use environment variables safely for secrets management?▼

Environment variables alone are insufficient for production. This Skill integrates environment variable patterns with vault solutions and pre-commit checks to prevent accidental leakage while maintaining developer workflow usability.

Does this cover secrets management for multiple cloud platforms?▼

Yes. This Skill provides integration patterns for AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault, with guidance on centralized policies, rotation, and audit logging across multi-platform deployments.

Related Skills

Explore More Software Engineering Skills→
wesleyegbertowesleyegberto
3

secrets-management

Manage and rotate credentials in CI/CD pipelines with HashiCorp Vault and cloud secret managers.

Community
Advanced
rohitg00rohitg00
944

k8s-certs

Automate Kubernetes certificate management with cert-manager for issuers and certificates.

Community
Advanced
giuseppe-trisciuogliogiuseppe-trisciuoglio
322

aws-sdk-java-v2-secrets-manager

Store and retrieve AWS Secrets Manager secrets using the Java SDK 2.x.

Community
Intermediate
yashvinthanyashvinthan

secrets-management

Manage secrets in CI/CD pipelines with Vault or AWS Secrets Manager.

Community
Advanced