Security Secrets Management

Purpose

Design a secrets management strategy covering detection (GitLeaks, truffleHog, ggshield), centralized storage (Vault, AWS Secrets Manager, GCP Secret Manager, Azure Key Vault), automated rotation, Kubernetes External Secrets integration, and developer workflow prevention.

Agent Protocol

Trigger

Exact user phrases: "secrets management", "secret scanning", "GitLeaks", "truffleHog", "ggshield", "vault", "credential rotation", ".env", "environment variables", "secret detection", "secret storage", "HashiCorp Vault", "AWS Secrets Manager", "GCP Secret Manager", "secret rotation", "pre-commit secret", "credential leak", "hardcoded secret", "External Secrets", "secret audit".