skills.rest
kyamsSRL
kyamsSRLCOMMUNITY
Explore all skills by this author →
GitHub

secrets-management

Manages secrets for CI/CD pipelines using HashiCorp Vault and other providers.

Updated Mar 18, 2026
Search Tags:#kubernetes#vault#github-actions#ci-cd#aws-secrets-manager#secrets-management#secret-rotation
One-click install
npx skills add https://github.com/kyamsSRL/TinyCopro --skill secrets-management-kyamssrl
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/kyamsSRL/TinyCopro/tree/main/.claude/skills/secrets-management
Command: npx skills add https://github.com/kyamsSRL/TinyCopro --skill secrets-management-kyamssrl

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Prevents hardcoded credentials and unsecured secret handling in CI/CD pipelines by centralizing storage, access controls, and rotation to reduce leakage and unauthorized access.

Core Features & Use Cases

  • Centralized Secret Stores: Guidance for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager to hold credentials and certificates.
  • CI/CD Integration & Masking: Patterns for injecting secrets into GitHub Actions and GitLab CI with masking and least-privilege access, plus examples for Terraform and Kubernetes ExternalSecrets.
  • Automated Rotation & Scanning: Automated rotation workflows, Lambda-based rotation examples, and secret-scanning hooks for pre-commit and CI.
  • Use Case: Rotate a database password automatically, update the DB, and deploy application containers with the new credential exposed only as a masked CI environment variable.

Quick Start

Use the secrets-management skill to retrieve a production database password from Vault and export it as a masked CI environment variable for deployment.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inject secrets from HashiCorp Vault into GitHub Actions as masked environment variables?▼

To prevent hardcoded credentials in CI/CD pipelines, use centralized secret stores like HashiCorp Vault or AWS Secrets Manager to hold credentials and certificates, reducing leakage and unauthorized access through strict access controls.

How do I rotate a database password automatically and update containers in Kubernetes?▼

You can rotate a database password automatically using Lambda-based rotation workflows, which update the database and deploy application containers with the new credential exposed only as a masked CI environment variable.

Does Kubernetes ExternalSecrets work with AWS Secrets Manager for CI/CD pipelines?▼

Yes, this approach supports HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager, offering patterns for injecting secrets into GitHub Actions and GitLab CI with masking and least-privilege access.

Can I add secret-scanning hooks to pre-commit and CI pipelines to prevent credential leakage?▼

Yes, you can add secret-scanning hooks for pre-commit and CI pipelines to detect and prevent hardcoded credentials from entering your codebase, ensuring unsecured secret handling is blocked before deployment.

What is the best way to integrate infrastructure as code with secret rotation and audit logging?▼

The best way to integrate infrastructure as code with secret rotation is to use centralized secret stores with automated rotation workflows and audit logging, satisfying requirements for secure credential retrieval and tracking.

Can I use Terraform to provision secrets across Azure Key Vault and Google Secret Manager?▼

Yes, Terraform examples are provided to integrate with centralized secret stores like Azure Key Vault and Google Secret Manager, allowing you to provision and manage credentials and certificates alongside your infrastructure as code.

Related Skills

Explore More Software Engineering Skills→
HermeticOrmusHermeticOrmus
89

secrets-management

Implement secure secrets management for CI/CD pipelines with Vault and cloud secret managers.

Community
Advanced
riandeoliveirariandeoliveira

implementing-secret-scanning-with-gitleaks

Scan Git repositories with Gitleaks to detect and prevent hardcoded credentials.

Community
Advanced
AI-SafeterAI-Safeter
10

secrets-management

Automate secure secrets management across CI/CD backends with access controls.

Community
Advanced
leonardoteodorooleonardoteodoroo

secrets-management

Manage credentials in CI/CD pipelines with Vault, AWS Secrets Manager, and Azure Key Vault.

Community
Advanced