Secrets Management

This handles the practical side of keeping secrets out of your CI/CD pipelines across HashiCorp Vault, AWS Secrets Manager, and platform-native solutions like GitHub secrets. It covers the actual integration patterns you need for GitHub Actions and GitLab CI, includes Terraform examples for AWS Secrets Manager, and shows how to set up secret rotation and scanning with tools like TruffleHog. The Kubernetes External Secrets Operator examples are solid if you're running containerized deployments. What I like is that it doesn't just tell you to "use a secret manager" but actually shows the YAML and bash commands to wire everything together properly.

skills.sh installs: 13.6K
GitHub stars: 42.4K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add wshobson/agents --skill secrets-management --agent claude-code

Installs into .claude/skills of the current project.

Files

Secrets Management

Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

Purpose

Implement secure secrets management in CI/CD pipelines without hardcoding sensitive information.

When to Use

Store API keys and credentials
Manage database passwords
Handle TLS certificates
Rotate secrets automatically
Implement least-privilege access

Secrets Management Tools

HashiCorp Vault

Centralized secrets management
Dynamic secrets generation
Secret rotation
Audit logging
Fine-grained access control

AWS Secrets Manager

AWS-native solution
Automatic rotation
Integration with RDS
CloudFormation support

Azure Key Vault

Azure-native solution
HSM-backed keys
Certificate management
RBAC integration

Google Secret Manager

GCP-native solution
Versioning
IAM integration

HashiCorp Vault Integration

Setup Vault

# Start Vault dev server
vault server -dev

# Set environment
export VAULT_ADDR='http://127.0.0.1:8200'
export VAULT_TOKEN='root'

# Enable secrets engine
vault secrets enable -path=secret kv-v2

SKILL.md on GitHub