skills.rest
SanketAdlak
SanketAdlakCOMMUNITY
Explore all skills by this author →
Website𝕏@devsanket14GitHub

secrets-management

Implement secure secrets management for CI/CD pipelines using Vault and cloud secret stores.

Updated Apr 23, 2026
Search Tags:#ci/cd#github actions#kubernetes#secrets management#vault#aws secrets manager#secret rotation
One-click install
npx skills add https://github.com/SanketAdlak/PDMProjectDesign --skill secrets-management-sanketadlak
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/SanketAdlak/PDMProjectDesign/tree/main/.agents/skills/secrets-management
Command: npx skills add https://github.com/SanketAdlak/PDMProjectDesign --skill secrets-management-sanketadlak

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Hardcoding API keys, database passwords, and certificates in CI/CD pipelines creates security breaches and compliance failures. This Skill provides patterns for storing, retrieving, and rotating secrets securely across platforms. ## Core Features & Use Cases - Multi-Platform Integration: Configure HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager within GitHub Actions and GitLab CI pipelines. - Secret Rotation & Scanning: Automate credential rotation with AWS Lambda and detect leaked secrets using TruffleHog pre-commit hooks and CI scanning jobs. - Kubernetes Secrets Sync: Use External Secrets Operator to sync Vault secrets into Kubernetes clusters automatically. - Use Case: A team needs to deploy to production without exposing database credentials in pipeline logs. Use this Skill to fetch secrets from Vault at runtime, mask them in logs, and rotate them on a schedule. ## Quick Start Show me how to pull database credentials from HashiCorp Vault into my GitHub Actions deployment workflow.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I use HashiCorp Vault secrets in GitHub Actions?▼

Use the hashicorp/vault-action step with your Vault URL and token to import secrets as environment variables. Map Vault paths like secret/data/database to variables such as DB_USERNAME and DB_PASSWORD for use in later steps.

How to retrieve AWS Secrets Manager values in a CI pipeline?▼

Configure AWS credentials with aws-actions/configure-aws-credentials, then call aws secretsmanager get-secret-value with the secret ID. Mask the output with ::add-mask:: and write it to $GITHUB_ENV for subsequent steps.

Vault vs AWS Secrets Manager for CI/CD secrets?▼

Vault offers dynamic secrets, fine-grained access control, and multi-cloud support, while AWS Secrets Manager provides native RDS integration and automatic rotation within AWS. Choose based on your cloud footprint and rotation needs.

How do I prevent secrets from leaking into Git commits?▼

Add a pre-commit hook running TruffleHog against the repository filesystem to block commits containing secrets. Also run TruffleHog as a CI scanning stage so leaked credentials fail the pipeline.

Can I sync Vault secrets into Kubernetes automatically?▼

Yes, the External Secrets Operator syncs Vault secrets into Kubernetes Secrets. Define a SecretStore pointing to your Vault server and an ExternalSecret mapping remote keys to Kubernetes secret keys with a refresh interval.

How do I rotate secrets automatically in AWS?▼

Create a Lambda function that retrieves the current secret, generates a new password, updates the target database, and writes the new value back with put_secret_value. Schedule the rotation through Secrets Manager's rotation configuration.

Related Skills

Explore More Software Engineering Skills→
ACGSpgpACGSpgp

secrets-management

Manage secrets in CI/CD pipelines with Vault and cloud secret managers.

Official
Advanced
somachaksomachak

auditing-secrets-and-config

Audit code, configuration, and CI/CD pipelines for exposed secrets.

Community
Intermediate
xalgordxalgord
954

implementing-secrets-scanning-in-ci-cd

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment.

Community
Intermediate
keiretsu-labskeiretsu-labs
9

SOPS Credentials

Document SOPS-encrypted secrets management with FluxCD for Kubernetes.

Official
Intermediate