'secrets' 검색 결과

Comprehensive secrets extraction methodology targeting CI/CD environments across all major platforms. Covers environment variable extraction from build contexts, exploitation of vault and secrets-manager misconfigurations (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager), runner and agent token abuse for lateral movement, OIDC federation attacks exploiting trust relationships between CI/CD providers and cloud platforms, build log leakage analysis for inadvertently exposed credentials, cache poisoning techniques for credential exfiltration, platform-specific credential store exploitation (GitHub Actions secrets, GitLab CI variables, Jenkins credential providers), service connection and service account abuse in Azure DevOps and GCP, and Docker registry credential theft from build environments. Maps to MITRE ATT&CK T1552 (Unsecured Credentials) and its sub-techniques. Each section provides enumeration procedures, extraction techniques, and post-exploitation pivoting guidance for usi...

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

사람이 직접 해야 하는 서비스 설정과 이전 절차를 대화형 bash 스크립트로 만듭니다. 화면 조작과 비밀 정보 입력, 설정값 저장을 단계별로 안내합니다.

• 외부 서비스 설정 절차 안내
• 인증 정보를 입력하고 .env에 저장
• CI용 GitHub 비밀 정보 설정

Set up Kubernetes deployments with ArgoCD or Flux CD using GitOps, an approach that stores the desired system configuration in Git. Configure automatic synchronization, staged rollouts, secret management, and deployment workflows across environments or clusters.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up automatic deployments from Git
• Managing deployments across multiple Kubernetes clusters
• Configuring canary or blue-green releases

Set up decoy credentials, storage, and secrets across AWS, Azure, and GCP to detect suspicious access. Connect audit logs to security alerts, verify detection, and document permissions, resource inventories, and maintenance plans.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Detecting use of leaked cloud credentials
• Monitoring suspicious access to decoy storage and secrets
• Extending on-premises deception coverage to cloud environments

Analyze Kubernetes API server audit logs to identify pod access, secret reads, permission changes, privileged pods, and anonymous requests. Use the event patterns to reconstruct suspicious activity and develop detection rules for security monitoring systems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Tracing API activity during a suspected cluster compromise
• Reviewing access to Kubernetes secrets
• Investigating permission changes and privileged pods

Set up automated Android builds and Google Play publishing with GitHub Actions. Supports TWA, React Native, Flutter, and native Android, with signing setup, separate testing and production tracks, and automatic build-number increments on main.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up Google Play publishing from GitHub
• Separating internal, alpha, beta, and production releases
• Automating versionCode increments on main

Load API keys, tokens, and other secrets from Infisical into a shell or a specific command. The skill covers finding secret names, checking availability, and passing values to commands without displaying or logging them.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Loading a missing API key before running a command
• Passing secrets only to the process that needs them
• Checking secret names and availability without displaying values

Guide secret synchronization between Infisical and a local encrypted vault, a store for sensitive values such as API keys. Covers authentication, reading and updating secrets, change tracking, and troubleshooting without exposing values in logs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Pulling Infisical secrets into a local encrypted vault
• Creating or updating secrets from local values
• Troubleshooting authentication and permission errors

Configure Convex deployment environment variables for secrets such as API keys, read them from application actions, and check the configured values while keeping secrets out of source code and Git.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting API keys for a Convex deployment
• Reading secrets from actions
• Managing separate values for each deployment

Creates and manages secrets in AWS Secrets Manager following security best practices. Always use this skill when creating secrets — it sets up dedicated KMS encryption keys, automatic rotation, least-privilege IAM policies, CloudTrail auditing, and lifecycle management that are essential for production-grade secret handling.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect hardcoded sensitive data (API keys, access tokens, private keys, passwords, etc.) in publicly accessible code — frontend JavaScript, mobile apps, client-side bundles, and HTML templates. Uses a three-phase approach: recon (find secret candidates), batched verify (confirm real secrets in public code paths, 3 candidates each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/hardcodedsecrets-results.md. Use when asked to find hardcoded secrets, leaked API keys, or exposed credentials.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Store and rotate secrets in AWS Secrets Manager. Configure automatic rotation, access policies, and application integration. Use when managing secrets in AWS environments or requiring automatic credential rotation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Manage environment variables and secrets across development, staging, and production environments. Use when someone needs to audit env vars, sync secrets between environments, detect missing or mismatched variables, rotate credentials, or set up a new environment from an existing one. Trigger words: env vars, environment variables, secrets, .env file, dotenv, config management, secret rotation, missing variable, environment sync.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Scan code for security vulnerabilities, misconfigurations, and exposed secrets. Use when a user asks to audit security, find vulnerabilities, check for OWASP issues, scan for secrets, review dependencies for CVEs, detect SQL injection, find XSS vulnerabilities, or harden an application. Covers OWASP Top 10, dependency auditing, secrets detection, and generates fix recommendations with severity ratings.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Azure Key Vault Secrets SDK for Rust. Use for storing and retrieving secrets, passwords, and API keys. Triggers: "keyvault secrets rust", "SecretClient rust", "get secret rust", "set secret rust".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Azure Key Vault Secrets SDK for Rust. Use for storing and retrieving secrets, passwords, and API keys. Triggers: "keyvault secrets rust", "SecretClient rust", "get secret rust", "set secret rust".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Azure Key Vault Secrets SDK for Rust. Use for storing and retrieving secrets, passwords, and API keys. Triggers: "keyvault secrets rust", "SecretClient rust", "get secret rust", "set secret rust".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Azure Key Vault Secrets SDK for Rust. Use for storing and retrieving secrets, passwords, and API keys. Triggers: "keyvault secrets rust", "SecretClient rust", "get secret rust", "set secret rust".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Azure Key Vault Secrets SDK for Rust. Use for storing and retrieving secrets, passwords, and API keys. Triggers: "keyvault secrets rust", "SecretClient rust", "get secret rust", "set secret rust".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

OpenClaw의 GitHub Secret Scanning 경고를 조사하고 비밀 정보를 가립니다. 댓글 삭제와 재작성, 작성자 알림, 경고 처리를 진행합니다.

• 인증 정보가 유출된 위치를 조사합니다
• Issue와 PR 본문의 비밀 정보를 가립니다
• 비밀 정보가 있는 댓글을 삭제하고 재작성합니다

Quarkus 앱의 인증, 접근 권한, 입력 검증을 구현하고 점검합니다. 비밀 정보 관리, 비밀번호 해싱, 요청 제한, 감사 로그와 의존성의 알려진 취약점도 다룹니다.

• Quarkus API에 JWT 또는 OIDC 인증 추가
• 역할별 권한과 데이터 소유자 확인 점검
• 입력 검증과 데이터베이스 조회 검토

Find agent skills on GitHub, score their relevance using rule-based checks, scan for malware and embedded secrets, and import them into supported agent directories, including Hermes, Claude Code, Gemini CLI, and OpenCode.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Find community skills for a specific task
• Compare skills using relevance scores
• Check for malware and embedded secrets