secrets-management

Manage CI/CD pipeline secrets with Vault or AWS Secrets Manager.

Updated Jan 13, 2026
One-click install
npx skills add https://github.com/ollieb89/vibe_coding --skill secrets-management-ollieb89
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/ollieb89/vibe_coding/tree/main/.agent/cicd-automation/skills/secrets-management
Command: npx skills add https://github.com/ollieb89/vibe_coding --skill secrets-management-ollieb89

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill addresses the critical need to manage sensitive credentials and secrets within CI/CD pipelines, preventing hardcoding and enhancing security.

Core Features & Use Cases

  • Centralized Secret Storage: Utilize tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or Google Secret Manager.
  • Secure Credential Handling: Store API keys, database passwords, and certificates without exposing them in code.
  • Automated Rotation: Implement mechanisms for regularly rotating secrets to minimize exposure risk.
  • Use Case: Securely inject database passwords and API keys into your GitHub Actions or GitLab CI jobs without ever committing them to your repository.

Quick Start

Use the secrets-management skill to integrate HashiCorp Vault with your GitHub Actions workflow.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely inject secrets into GitHub Actions or GitLab CI workflows?

You can securely inject secrets by integrating HashiCorp Vault or AWS Secrets Manager with your GitHub Actions or GitLab CI pipelines to retrieve credentials at runtime without hardcoding them.

What is the best way to manage CI/CD credentials without hardcoding them in code?

The best way to manage CI/CD credentials is using centralized storage like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or Google Secret Manager to securely store and retrieve API keys and database passwords.

Does HashiCorp Vault work with AWS Secrets Manager for pipeline secrets management?

Yes, this approach supports integrating with both HashiCorp Vault and AWS Secrets Manager, allowing you to choose either or combine them for secure storage and retrieval of credentials across your CI/CD environments.

Can I automate secret rotation in CI/CD pipelines to minimize exposure risk?

Yes, you can implement automated rotation mechanisms to regularly update secrets in your CI/CD pipelines. This minimizes exposure risk by ensuring credentials are rotated without manual intervention.

What platforms are supported for secure storage and retrieval of CI/CD secrets?

Supported platforms for secure CI/CD secrets storage and retrieval include HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager, providing native or external integration for your pipelines.

Why should I use a secrets manager instead of native CI/CD environment variables?

Using a dedicated secrets manager provides centralized storage, automated rotation, and enhanced security for sensitive credentials compared to native CI/CD environment variables, preventing accidental exposure and ensuring secure injection.