secret-management-patterns
HashiCorp Vault, cloud secret managers, rotation strategies, and zero-trust secret access
npx skills add vibeeval/vibecosystem --skill secret-management-patterns --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Secret Management Patterns ## Environment Variables (Baseline) ```typescript // envalid ile startup validation import { cleanEnv, str, url } from 'envalid' const env = cleanEnv(process.env, { DATABASE_URL: url(), JWT_SECRET: str({ desc: 'Min 32 chars' }), STRIPE_SECRET_KEY: str(), REDIS_URL: url({ default: 'redis://localhost:6379' }) }) // App başlarken validation fail ederse crash (fail-fast) ``` ## Cloud Secret Managers ```typescript // AWS Secrets Manager import { SecretsManagerClient, GetSecretValueCommand } from '@aws-sdk/client-secrets-manager' const client = new SecretsManagerClient({ region: 'eu-west-1' }) const secret = await client.send(new GetSecretValueCommand({ SecretId: 'prod/db-credentials' })) // GCP Secret Manager import { SecretManagerServiceClient } from '@google-cloud/secret-manager' const client = new SecretManagerServiceClient() const [version] = await client.accessSecretVersion({ name: 'projects/123/secrets/db-pass/versions/latest' }) ``` ## Secret Rotation ``` 1. Yeni secret oluştur 2. Dual-accept: eski + yeni kabul et 3. Tüm consumer'ları yeniye geçir 4. Eski secret'ı deaktif et 5. Grace period sonrası sil ``` ## CI/CD Secret Handling ```yaml # GitHub Act
- Environment Variables (Baseline)
- Cloud Secret Managers
- Secret Rotation
- CI/CD Secret Handling
- Secret Detection
- Checklist
- Anti-Patterns
Pre-commit hook pip install detect-secrets detect-secrets scan --baseline .secrets.baseline trufflehog git file://. --since-commit HEAD~1 --only-verified gitleaks detect --source . --verbose
What does the secret-management-patterns skill do?
HashiCorp Vault, cloud secret managers, rotation strategies, and zero-trust secret access
How do I install it?
Run `npx skills add vibeeval/vibecosystem --skill secret-management-patterns --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From vibeeval/vibecosystem, a repository with 521 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.