skills.rest
truefoundry
truefoundryOFFICIAL
Explore all skills by this author →
Website𝕏@truefoundryGitHub

truefoundry-secrets

Manage TrueFoundry secret groups and key-value secrets via API and CLI.

1|Updated Mar 27, 2026
Search Tags:#deployment#security#secrets#environment-variables#secret-management#tfy
One-click install
npx skills add https://github.com/truefoundry/tfy-deploy-skills --skill truefoundry-secrets
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: truefoundry-secrets
Source: https://github.com/truefoundry/tfy-deploy-skills/tree/main/skills/secrets
Command: npx skills add https://github.com/truefoundry/tfy-deploy-skills --skill truefoundry-secrets

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Secret groups and per-secret keys are essential for secure deployments; this skill provides a structured way to list, create, update, and delete them within TrueFoundry.

Core Features & Use Cases

  • List, create, update, and delete secret groups and individual key-value secrets.
  • Reference secrets in deployment manifests using tfy-secret:// URIs to avoid exposing raw values.
  • Rotate secrets and manage lifecycle across environments (pre-deploy, runtime, and post-deploy).

Quick Start

Create a secret group named prod-secrets and reference DB_PASSWORD as tfy-secret://my-org:prod-secrets:DB_PASSWORD in your deployment manifest.

Frequently Asked Questions about truefoundry-secrets

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage environment variables and secret groups for TrueFoundry deployments?▼

You manage TrueFoundry secret groups by creating collections of per-secret keys to store environment variables, enabling secure pre-deploy setup and runtime access without exposing raw values.

How do I reference secrets in a deployment manifest without exposing raw values?▼

Reference secrets in deployment manifests using tfy-secret:// URIs, such as tfy-secret://my-org:prod-secrets:DB_PASSWORD, to securely inject environment variables without exposing raw values.

Can I rotate and update individual secrets across different deployment environments?▼

Yes, you can update individual key-value secrets and manage their lifecycle across pre-deploy, runtime, and post-deploy environments to execute secure secret rotation.

What are the security limitations when handling raw secret values in TrueFoundry?▼

TrueFoundry enforces security rules that prohibit exposing raw secret values and require mapping secrets to environment variables, ensuring sensitive data remains protected during deployment.

Does TrueFoundry secret management support both CLI and API integration for creating secret groups?▼

Yes, TrueFoundry secret management guides integration with both the API and CLI, allowing you to list, create, update, and delete secret groups and individual keys programmatically.

Related Skills

Explore More Software Engineering Skills→
passionseedpassionseed
2

secrets

Manage TrueFoundry secret groups and individual secrets via Bash and curl.

Official
Advanced
microcksmicrocks
5

aspire-parameter

Configures secure parameters and secrets for .NET Aspire applications via AddParameter calls.

Official
Basic
truefoundrytruefoundry
13

secrets

Manage TrueFoundry secret groups and key-value secrets via CRUD operations.

Official
Intermediate
franzosterkampfranzosterkamp

setup-env

Automates transferring environment variables from local env files to Vercel and GitHub.

Community
Intermediate