Self-hosted alternatives to secrets-management

S

secrets-management

Implement secure secrets management for CI/CD pipelines

secrets-management is an agent skill from the wshobson/agents collection for handling secrets securely in CI/CD pipelines. Secrets are API keys, credentials, database passwords and TLS certificates, and the skill's purpose is to keep them out of code and configuration files while still letting pipelines and applications use them. It covers HashiCorp Vault and AWS Secrets Manager, along with the native secret stores that platforms provide, and explains how to choose among them. The skill applies when storing API keys and credentials, managing database passwords, handling TLS certificates, rotating secrets automatically so a leaked value stops working soon, and implementing least-privilege access so each job or service can read only the secrets it needs. Its central rule is to avoid hardcoding sensitive information anywhere in a repository or a pipeline definition. Secrets management touches the security of every system a team runs, so the agent's configuration should be reviewed by the people responsible for access and recovery, and tested so that a rotation does not break the services that depend on the secret. The skill is installed with the skills CLI from the wshobson/agents repository. Its skills.sh page showed about 12.9K installs and passing results from three security audits at the time of the scan.