skills.rest
RuanBuitendag42
RuanBuitendag42COMMUNITY
Explore all skills by this author →
GitHub

secrets-management

Encrypt and manage secrets in dotfiles with git-crypt, SOPS, age, and Bitwarden CLI.

Updated Oct 3, 2024
Search Tags:#encryption#secrets#bitwarden#sops#age#git-crypt#ssh-keys
One-click install
npx skills add https://github.com/RuanBuitendag42/.dotfiles --skill secrets-management-ruanbuitendag42
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/RuanBuitendag42/.dotfiles/tree/main/home/.copilot/skills/secrets-management
Command: npx skills add https://github.com/RuanBuitendag42/.dotfiles --skill secrets-management-ruanbuitendag42

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Encrypts and manages secrets across the dotfiles repository to prevent leakage of sensitive material during development and deployment.

Core Features & Use Cases

  • Git-crypt based encryption for selected files and directories
  • SOPS + age integration for YAML/ENV secrets
  • Bitwarden CLI workflow for key storage and retrieval
  • SSH key management with secure storage and controlled access
  • Security hardening practices and auditability
  • Use Case: secure storage of SSH keys and env vars in a personal dotfiles repo

Quick Start

Follow the integrated workflow to enable encryption, generate keys, and apply rotation to protect sensitive files.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I encrypt secrets in my dotfiles repository to prevent leakage?▼

To encrypt secrets in your dotfiles repository, you can use git-crypt for selected files and directories, preventing sensitive material leakage during development and deployment.

Does SOPS work with age for managing environment variables in git?▼

Yes, SOPS works with age for managing environment variables by integrating encryption and key handling directly in your workflow, securing YAML and ENV secrets across your repository.

What is the best way to store SSH keys securely in a dotfiles setup?▼

The best way to store SSH keys securely in a dotfiles setup is using Bitwarden CLI for key storage and retrieval alongside git-crypt, ensuring controlled access and secure storage.

Can I use Bitwarden CLI to retrieve secrets for automated decryption?▼

Yes, you can use the Bitwarden CLI workflow for key storage and retrieval, enabling automated decryption and secure access control for encrypted configuration data and environment files.

How do I rotate encryption keys for git-crypt and SOPS files?▼

You can rotate encryption keys by following the integrated workflow to generate new age and SOPS keys, applying rotation practices to protect sensitive files and maintain auditability.

When should I not use git-crypt for secrets management?▼

You should avoid using git-crypt alone when managing structured YAML or environment files, as SOPS provides targeted field-level encryption and better auditability for those specific formats.

Related Skills

Explore More Software Engineering Skills→
Fei2-LabsFei2-Labs
12

git-crypt

Manage git-crypt encrypted repositories with GPG and Bitwarden integration.

Official
Advanced
L3DigitalNetL3DigitalNet
6

age

Encrypt and decrypt files using the age utility with public keys, passphrases, or SSH keys.

Official
Intermediate
pratospratos
12

sops-secret-editor

Manage encrypted secrets in YAML files using SOPS and Age.

Community
Intermediate
nq-rdlnq-rdl

sops

Encrypt and decrypt YAML, JSON, ENV, and INI secrets with SOPS.

Official
Advanced