secrets-management
Secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, and native platform solutions.
Setup & Installation
Install command
clawhub install brandonwise/secrets-managementIf the CLI is not installed:
Install command
npx clawhub@latest install brandonwise/secrets-managementOr install with OpenClaw CLI:
Install command
openclaw skills install brandonwise/secrets-managementor paste the repo link into your assistant's chat
Install command
https://github.com/openclaw/skills/tree/main/skills/brandonwise/secrets-managementWhat This Skill Does
Covers how to store, retrieve, and rotate secrets in CI/CD pipelines using HashiCorp Vault, AWS Secrets Manager, and native platform secret stores. Includes patterns for GitHub Actions, GitLab CI, Kubernetes, and Terraform. Also covers secret scanning to catch leaked credentials before they reach git.
Centralizing secrets in a dedicated store with audit logging and automatic rotation reduces the risk of credential leaks compared to scattering values across .env files, CI variables, and config repositories.
When to Use It
- Pulling database passwords into GitHub Actions without hardcoding them
- Rotating API keys automatically on a 90-day schedule
- Syncing Vault secrets into Kubernetes pods via External Secrets Operator
- Blocking secret commits with a pre-commit TruffleHog hook
- Managing environment-specific credentials across dev, staging, and production
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Pulling database passwords into GitHub Actions without hardcoding them
- 1Pulling database passwords into GitHub Actions without hardcoding them
- 2Rotating API keys automatically on a 90-day schedule
- 3Syncing Vault secrets into Kubernetes pods via External Secrets Operator
- 4Blocking secret commits with a pre-commit TruffleHog hook
- 5Managing environment-specific credentials across dev, staging, and production
Secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, and native platform solutions.
Security Audits
These signals reflect official OpenClaw status values. A Suspicious status means the skill should be used with extra caution.