secrets-management

Store and rotate secrets in Vault, AWS Secrets Manager, Azure Key Vault, or Google Secret Manager for CI/CD pipelines.

Updated Dec 16, 2025
One-click install
npx skills add https://github.com/EanLee/article-write --skill secrets-management-eanlee
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/EanLee/article-write/tree/main/.github/skills/secrets-management
Command: npx skills add https://github.com/EanLee/article-write --skill secrets-management-eanlee

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need to manage sensitive credentials and secrets securely within CI/CD pipelines, preventing hardcoding and reducing security risks.

Core Features & Use Cases

  • Centralized Secret Storage: Utilize tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or Google Secret Manager.
  • CI/CD Integration: Seamlessly inject secrets into GitHub Actions, GitLab CI, and Kubernetes environments.
  • Automated Rotation: Implement strategies for regular secret rotation to enhance security.
  • Use Case: Securely deploy an application by fetching API keys and database credentials from a secrets manager within your GitHub Actions workflow, ensuring these sensitive values are never exposed in your code.

Quick Start

Use the secrets-management skill to store the API key 'my-api-key-123' in HashiCorp Vault under the path 'secret/api/key'.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely manage secrets in a CI/CD pipeline without hardcoding them?

Centralized secret storage uses tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or Google Secret Manager to securely store and fetch API keys and database passwords for your workflows.

Does this approach to secrets management work with GitHub Actions and GitLab CI?

Yes, secrets management integrates seamlessly with GitHub Actions, GitLab CI, and Kubernetes environments to fetch and inject credentials directly into your deployment workflows without exposing them in code.

What is the best way to rotate API keys and database passwords automatically?

Dynamic secret generation in secrets management provides fine-grained access control and automated rotation for sensitive credentials like API keys and TLS certificates, ensuring they are never exposed in code.

Why should I use AWS Secrets Manager instead of native platform solutions for storing credentials?

Using AWS Secrets Manager instead of native platform solutions provides centralized secret storage, dynamic secret generation, and fine-grained access control across multiple CI/CD environments and cloud platforms.