secrets-management

Implement secure secrets management for CI/CD pipelines with Vault and cloud secret managers.

89|14|Updated Nov 15, 2025
One-click install
npx skills add https://github.com/HermeticOrmus/LibreUIUX-Claude-Code --skill secrets-management-hermeticormus
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/HermeticOrmus/LibreUIUX-Claude-Code/tree/main/plugins/cicd-automation/skills/secrets-management
Command: npx skills add https://github.com/HermeticOrmus/LibreUIUX-Claude-Code --skill secrets-management-hermeticormus

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need to manage sensitive credentials and secrets within CI/CD pipelines, preventing hardcoding and enhancing security.

Core Features & Use Cases

  • Centralized Secret Storage: Integrates with tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager.
  • Secure Credential Handling: Enables secure storage, retrieval, and rotation of API keys, database passwords, and certificates.
  • CI/CD Integration: Provides examples for seamless integration with GitHub Actions and GitLab CI.
  • Use Case: Securely deploy your application by fetching database credentials from Vault in your GitHub Actions workflow without exposing them in your code.

Quick Start

Use the secrets-management skill to store the API key 'my-super-secret-key' in Vault under the path 'secret/api/key'.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage secrets in GitHub Actions without hardcoding them?

To manage secrets in GitHub Actions without hardcoding them, you can integrate with HashiCorp Vault or AWS Secrets Manager to securely fetch credentials during deployment. This skill provides workflow examples for retrieving sensitive data dynamically without exposing it in your code.

What is the best way to rotate API keys in a CI/CD pipeline?

The best way to rotate API keys in a CI/CD pipeline is by centralizing secret storage with tools like Azure Key Vault or Google Secret Manager. This enables automated secret rotation and secure retrieval without manual intervention.

Does this approach work with GitLab CI and HashiCorp Vault?

Yes, this secrets management approach works with GitLab CI and HashiCorp Vault. It supports seamless integration with both GitHub Actions and GitLab CI for automated secret retrieval and utilization during your deployment process.

Can I use AWS Secrets Manager to fetch database passwords for deployments?

Yes, you can use AWS Secrets Manager to securely fetch database passwords for deployments. This skill implements secure credential handling to retrieve and utilize sensitive data directly within your CI/CD pipeline.

How do I store a secret in Vault under a specific path for CI/CD?

To store a secret in Vault under a specific path for CI/CD, you use the secrets-management skill to place the key at a designated location like 'secret/api/key'. This ensures centralized storage and secure retrieval during automated deployments.

When should I use a centralized secrets manager instead of native CI/CD variables?

You should use a centralized secrets manager instead of native CI/CD variables when you need automated secret rotation, multi-cloud support across Azure Key Vault and Google Secret Manager, or advanced auditing across multiple deployment environments.