skills.rest
brucebanner010198-commits
brucebanner010198-commitsCOMMUNITY
Explore all skills by this author →
GitHub

secrets-vault

Provision vault references for project credentials with expiry and rotation governance.

Updated Apr 21, 2026
Search Tags:#security#audit#secrets#credentials#vault#rotation#ref-resolution
One-click install
npx skills add https://github.com/brucebanner010198-commits/DevSecOps-Agency --skill secrets-vault
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets-vault
Source: https://github.com/brucebanner010198-commits/DevSecOps-Agency/tree/main/skills/secrets-vault
Command: npx skills add https://github.com/brucebanner010198-commits/DevSecOps-Agency --skill secrets-vault

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Secrets management is hard: teams must provision, rotate, and audit credentials without exposing raw secrets in code or CI systems. This Skill enforces a tight lifecycle where every credential has an expiry, rotations include an overlap and verification step, and vault refs are resolved at runtime to minimize risk.

Core Features & Use Cases

  • Provision scoped credentials for projects and services using vault references instead of raw secrets.
  • Rotate credentials automatically with overlap and post-rotation verification to prevent outages.
  • Weekly secret scans and periodic ADR-style documentation to maintain a secure, auditable trail.

Quick Start

Create a vault manifest for your project and trigger provisioning to obtain a vault reference.

Frequently Asked Questions about secrets-vault

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is vault-based secret lifecycle management and how does it work?▼

Vault-based secret lifecycle management provisions scoped credentials using vault references instead of raw secrets. It enforces a tight lifecycle where every credential has an expiry, rotations include overlap and verification steps, and vault refs are resolved at runtime to minimize exposure risk.

How do I provision scoped credentials for a project using vault references?▼

Create a vault manifest for your project and trigger provisioning to obtain a vault reference. This provisions scoped credentials for projects and services while resolving refs at runtime, ensuring raw secrets are never exposed in code or CI systems.

How do I rotate credentials automatically without causing service outages?▼

Automated credential rotation includes an overlap period and post-rotation verification step to prevent outages. This ensures the new credential is active and validated before the old one expires, maintaining continuous service availability.

How do I run weekly secret scans and maintain an auditable trail for credentials?▼

Weekly secret scans and periodic ADR-style documentation maintain a secure, auditable trail for credentials. Scanning workflows identify and manage credentials while enforcing expiry governance for every credential across provisioning and rotation phases.

Can I use vault references in CI systems without exposing raw secrets?▼

Yes, vault references are resolved at runtime to minimize risk, ensuring raw secrets are never exposed in code or CI systems. The Skill provisions scoped credentials tied to projects using vault references instead of raw secret values.

Related Skills

Explore More Software Engineering Skills→
BartunekBartunek

init-onecli

Migrate .env credentials into the OneCLI Agent Vault.

Community
Advanced
proffesor-for-testingproffesor-for-testing
436

n8n-security-testing

Detect credential exposure in n8n workflow exports and executions.

Community
Advanced
Lobbi-DocsLobbi-Docs
18

vault-operations

Automate HashiCorp Vault secret management and dynamic credential rotation.

Official
Advanced
yashvinthanyashvinthan

secrets-management

Manage secrets in CI/CD pipelines with Vault or AWS Secrets Manager.

Community
Advanced