secrets-management - Secure Secrets for CI/CD Pipelines
Implement secure secrets management in CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions
Tags
Updated: 2026-05-09Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Store API keys
- Store credentials
- Manage database passwords
- Handle TLS certificates
- Rotate secrets
- Implement least-privilege access
- Retrieve secrets from Vault
- Retrieve secrets from AWS
- Use GitHub Secrets
- Use GitLab variables
- Scan code for secrets
- Configure secret backends
Inputs
- Secret types
- Secret owners
- Rotation requirements
- Vault server
- AWS Secrets Manager
- Azure Key Vault
- Google Secret Manager
- GitHub repository
- GitLab repository
- AWS credentials
- GitHub token
- Vault token
- CI/CD pipeline configuration
- Kubernetes cluster
Outputs
- Securely stored secrets
- Retrieved secrets
- Rotated secrets
- Masked secrets in logs
- Audit logs
- Kubernetes secrets
Requirements
- Secrets backend access
- CI/CD platform access
- Vault token
- AWS credentials
- GitHub token
- GitLab token
- Kubernetes cluster
- External Secrets Operator