secrets-management

Detect hardcoded secrets in source code by scanning for embedded API keys, passwords, tokens, and database credentials in code and config files. This Skill identifies risky configurations across application code and deployment scripts to reduce credential exposure.

Checking environment variables for cloud credential leaks involves reviewing AWS, Azure, and GCP credentials and environment variable handling. This Skill analyzes environment configurations to identify insecure secret storage and risky cloud key exposure.

Remediate hardcoded credentials by applying secure secret handling patterns and ASVS-aligned rules. This Skill provides remediation guidance and secure code examples to replace exposed API keys, JWTs, and tokens with secure storage solutions.

Yes, secrets-management supports CI pipelines and applies ASVS-aligned rules with CWE mappings. It detects risky secrets and configurations during development, enabling secure coding practices and continuous credential exposure monitoring.

Implement credential storage and key lifecycle rotation policies by following detection and remediation guidance for cryptographic keys. This Skill recommends secure storage solutions and rotation policies to manage the lifecycle of database credentials and cloud keys.

Yes, you can review infrastructure configurations for insecure JWTs and database credentials. This Skill scans deployment scripts and config files to identify hardcoded cryptographic keys and provides secure code examples for remediation.