principle-no-static-credentials
Apply before a pipeline or workload authenticates to Azure or AWS, and again if a credential leaks. Use OIDC or workload identity federation and short-lived tokens. Revoke and rotate anything that has leaked.
- License
- MIT
Pinned to revision cc11d9ced246, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/principle-no-static-credentials/SKILL.md
- skills/principle-no-static-credentials/tests/prompts.md
Every link opens the file at its source, pinned to the revision this page describes.