secrets-management

Secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, and platform-native solutions. Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools. Implement secure secrets management in CI/CD pipelines without hardcoding sensitive information. Reference: See references/vault-setup.md Reference: See references/github-secrets.md - Supports multiple backends: HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and GitHub/GitLab native secrets - Includes integration examples for GitHub Actions, GitLab CI, Terraform, and Kubernetes with automatic secret rotation capabilities - Covers best practices including secret masking in logs, least-privilege access, audit logging, and secret scanning with tools like TruffleHog - Provides setup guides and code examples for storing, retrieving, and rotating credentials across different CI/CD platforms and infrastructure tools - Store API keys and credentials - Manage database passwords - Handle TLS certificates - Rotate secrets automatically - Implement least-privilege access - Centralized secrets management - Dynamic secrets generation - Secret rotation - Audit logging - Fine-grained access control - AWS-native solution - Automatic rotation - Integration with RDS - CloudFormation support - Azure-native solution - HSM-backed keys - Certificate...