secrets-management-design

SSiertsema/claude-code-plugins

Secrets management: vault selection (Vault / AWS-Secrets-Manager / GCP / Azure Key Vault / Doppler / 1Password / Infisical), per-type lifecycle (DB creds dynamic, cloud credentials via OIDC federation, API keys rotated, certs via ACME, JWT keys scheduled), injection patterns ranked (sidecar > file > env), environment separation, CI/CD OIDC federation, break-glass procedure. Mermaid diagrams with optional PNG export.

GitHub stars

1

Sponsors

SnugThe clipboard manager you and your agent can use, safelyAgent CaffeineClose your lid, come back to finished workWaxBlock anything with supervision, without erasing your iPhoneOpen StepsSponsoredFree and open-source skills that make AI coding agents easier to understand, verify, and control.