From gitlab-ci
Configures GitLab CI/CD variables and manages secrets securely, covering predefined/custom vars, scopes, protected/masked/file types, and integrations with Vault, AWS Secrets Manager, Azure Key Vault, OIDC.
How this skill is triggered — by the user, by Claude, or both
Slash command
/gitlab-ci:variables-secretsThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Configure CI/CD variables and manage secrets securely in GitLab pipelines.
Configure CI/CD variables and manage secrets securely in GitLab pipelines.
build:
script:
- echo "Branch: $CI_COMMIT_BRANCH"
- echo "Commit: $CI_COMMIT_SHA"
- echo "Pipeline: $CI_PIPELINE_ID"
- echo "Project: $CI_PROJECT_NAME"
- echo "Registry: $CI_REGISTRY_IMAGE"
variables:
NODE_ENV: production
DATABASE_URL: "postgres://localhost/app"
build:
variables:
BUILD_TARGET: dist
script:
- npm run build --target=$BUILD_TARGET
variables:
GLOBAL_VAR: "available everywhere"
deploy:
variables:
DEPLOY_ENV: production
script:
- ./deploy.sh $DEPLOY_ENV
Configure in GitLab UI: Settings > CI/CD > Variables
variables:
PUBLIC_KEY:
value: "pk_test_xxx"
description: "Stripe public key"
Set variables with:
deploy:
script:
- cat $KUBECONFIG # File variable contents
- kubectl apply -f deployment.yaml
job:
secrets:
DATABASE_PASSWORD:
vault:
engine:
name: kv-v2
path: secret
field: password
path: production/db
job:
secrets:
API_KEY:
azure_key_vault:
name: my-api-key
version: latest
job:
secrets:
AWS_SECRET:
aws_secrets_manager:
name: prod/api-key
version_id: latest
deploy:aws:
id_tokens:
AWS_TOKEN:
aud: https://gitlab.com
script:
- >
aws sts assume-role-with-web-identity
--role-arn $AWS_ROLE_ARN
--web-identity-token $AWS_TOKEN
.gitlab-ci.ymlnpx claudepluginhub thebushidocollective/han --plugin gitlab-ciImplements secure secrets management in CI/CD pipelines using HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. Includes GitHub Actions and GitLab CI integration examples.
<!-- AUTO-GENERATED by export-plugins.py — DO NOT EDIT -->
Guides secure secrets management using Vault, AWS Secrets Manager, Azure Key Vault, environment variables, rotation, scanning tools, and CI/CD security. For implementing storage, rotation, leak prevention, credentials review.