secrets-management

★ 8.5 · security

secrets-management is a Claude Code skill that implements secure secrets management in CI/CD pipelines, eliminating the need to hardcode sensitive credentials. It covers HashiCorp Vault with kv-v2 engine, dynamic secret generation, and audit logging; AWS Secrets Manager with automatic rotation, RDS integration, and Terraform support; plus Azure Key Vault and Google Secret Manager. Practical examples include importing Vault secrets via hashicorp/vault-action in GitHub Actions and GitLab CI, retrieving AWS secrets with log masking, and working with platform-native environment variables and protected/masked GitLab CI variables. Automated secret rotation via AWS Lambda, least-privilege access patterns, and secret scanning with GitGuardian and TruffleHog are also covered — making this skill essential for teams securing credentials across deployment environments.