skills.rest
wesleyegberto
wesleyegbertoCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

secrets-management

Manage and rotate credentials in CI/CD pipelines with HashiCorp Vault and cloud secret managers.

3|2|Updated Mar 23, 2026
Search Tags:#rbac#credentials#vault#ci-cd#aws-secrets-manager#secrets-management#secret-rotation
One-click install
npx skills add https://github.com/wesleyegberto/software-engineering-skills --skill secrets-management-wesleyegberto
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/wesleyegberto/software-engineering-skills/tree/main/plugins/devops/skills/secrets-management
Command: npx skills add https://github.com/wesleyegberto/software-engineering-skills --skill secrets-management-wesleyegberto

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Implement secure secrets management for CI/CD pipelines without hardcoding credentials and exposing sensitive data.

Core Features & Use Cases

  • Centralized secrets storage and rotation across Vault, AWS Secrets Manager, and cloud-native vaults
  • Fine-grained access control and auditability for CI/CD workflows
  • Seamless secret retrieval in GitHub Actions, GitLab CI, and other CI systems

Quick Start

Configure your CI/CD to fetch credentials from a centralized secret store and use them at runtime.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage secrets in CI/CD pipelines without hardcoding credentials?▼

Secure secrets management in CI/CD pipelines involves fetching credentials at runtime from centralized stores like HashiCorp Vault or AWS Secrets Manager, eliminating hardcoded credentials while maintaining strict access control and audit logging.

How do I rotate credentials automatically in cloud and hybrid environments?▼

Automated secret rotation in cloud and hybrid environments uses tools like AWS Secrets Manager and Azure Key Vault to dynamically update credentials. This ensures continuous security across multi-service deployments without manual intervention.

Can I use HashiCorp Vault with GitHub Actions for dynamic secrets?▼

Yes, you can use HashiCorp Vault with GitHub Actions to retrieve dynamic secrets. The integration supports seamless secret retrieval via standard APIs, allowing CI workflows to access centralized storage securely at runtime.

What is the best way to enforce access control for CI/CD secrets?▼

The best way to enforce access control for CI/CD secrets is through policy-based access control integrated with centralized secret storage. This provides fine-grained permissions and auditability across multi-service CI/CD workflows.

Does this secrets management approach support multi-cloud environments?▼

Yes, this secrets management approach supports multi-cloud environments by integrating with AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and HashiCorp Vault. It applies across cloud, hybrid, and on-prem deployments.

Related Skills

Explore More Software Engineering Skills→
manutejmanutej
61

terraform-infrastructure-as-code

Automate cloud infrastructure provisioning and management with Terraform across AWS, Azure, and GCP.

Community
Advanced
marmikcfcmarmikcfc

champion-tracker

Monitor champions' job changes and generate re-engagement alerts.

Community
Advanced
Sir-chawakornSir-chawakorn
9

secrets-management

Detect hardcoded credentials and generate remediation plans for secure vault migration.

Community
Advanced
johnlindquistjohnlindquist
24

long-agent

Manage long-running agent sessions with progress tracking and context persistence.

Community
Intermediate