secrets-vault

Name: secrets-vault
Availability: InStock
Author: brucebanner010198-commits

Provision vault references for project credentials with expiry and rotation governance.

Updated Apr 21, 2026

Search Tags:#security #audit #secrets #credentials #vault #rotation #ref-resolution

Ready to run

npx skills add https://github.com/brucebanner010198-commits/DevSecOps-Agency --skill secrets-vault

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: secrets-vault
Source: https://github.com/brucebanner010198-commits/DevSecOps-Agency/tree/main/skills/secrets-vault
Command: npx skills add https://github.com/brucebanner010198-commits/DevSecOps-Agency --skill secrets-vault

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Secrets management is hard: teams must provision, rotate, and audit credentials without exposing raw secrets in code or CI systems. This Skill enforces a tight lifecycle where every credential has an expiry, rotations include an overlap and verification step, and vault refs are resolved at runtime to minimize risk.

Core Features & Use Cases

Provision scoped credentials for projects and services using vault references instead of raw secrets.
Rotate credentials automatically with overlap and post-rotation verification to prevent outages.
Weekly secret scans and periodic ADR-style documentation to maintain a secure, auditable trail.

Quick Start

Create a vault manifest for your project and trigger provisioning to obtain a vault reference.

Frequently Asked Questions about secrets-vault

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is vault-based secret lifecycle management and how does it work?▼

Vault-based secret lifecycle management provisions scoped credentials using vault references instead of raw secrets. It enforces a tight lifecycle where every credential has an expiry, rotations include overlap and verification steps, and vault refs are resolved at runtime to minimize exposure risk.

How do I provision scoped credentials for a project using vault references?▼

Create a vault manifest for your project and trigger provisioning to obtain a vault reference. This provisions scoped credentials for projects and services while resolving refs at runtime, ensuring raw secrets are never exposed in code or CI systems.

How do I rotate credentials automatically without causing service outages?▼

Automated credential rotation includes an overlap period and post-rotation verification step to prevent outages. This ensures the new credential is active and validated before the old one expires, maintaining continuous service availability.

How do I run weekly secret scans and maintain an auditable trail for credentials?▼

Weekly secret scans and periodic ADR-style documentation maintain a secure, auditable trail for credentials. Scanning workflows identify and manage credentials while enforcing expiry governance for every credential across provisioning and rotation phases.

Can I use vault references in CI systems without exposing raw secrets?▼

Yes, vault references are resolved at runtime to minimize risk, ensuring raw secrets are never exposed in code or CI systems. The Skill provisions scoped credentials tied to projects using vault references instead of raw secret values.