credential-rotation

Supply Chain Firewall — block compromised packages, close the Ghost Gap, cure infections. Zero dependencies.

One-click Claude Code account switcher - rotate which account pays without touching your projects or history. MIT.

Keeps ArgoCD's downstream cluster registrations valid using short-lived ServiceAccount tokens it mints and rotates itself, replacing the permanent credential that argocd cluster add leaves behind.

Interval model of credential lifecycle events that answers rotation and overlap over a time range

A working privileged access management lab. Conjur OSS as the credential vault with policy-based rotation and a tested RBAC boundary, and Apache Guacamole as a session proxy recording every SSH and RDP session to two isolated targets.

SPIFFE-style workload identity broker for AI agents. Short-lived JWT-SVIDs, audience binding, zero long-lived API keys. Zero-trust identity layer for agent fleets.

Securing Google Kubernetes Engine (GKE) clusters using IAM RBAC controls, Pod Security Admission (PSA) policies, and credential/IP rotation. 🔒✨

HashiCorp Vault Solace Plugin

Keep Vapi BYO-SIP-trunks alive on flaky carriers. systemd-based health check with auto credential rotation.

AWS incident simulation documenting recovery from loss of MFA access after offboarding failure. Covers IAM investigation, CLI recovery, internal verification, RCA, and preventive measures — based on SME experience in AWS account security.

苹果ID轮转系统｜Apple ID Rotation System for authorized test accounts

Credential lifecycle for Azure VMs that cannot use Windows LAPS or Entra login

Automated credential rotator for MongoDB Atlas users tied to GCP Cloud Run Services and Jobs. Uses Terraform + Python to dynamically create per-service database users with strong random passwords and output secure connection strings.

Defensive Python CLI that enforces credential rotation policies from metadata inventories and fails CI when credentials are expired, stale, or missing rotation data.

Evidence-only DSH plugin for credential retirement settlement

Monitor Microsoft Entra ID app and service-principal credentials for upcoming expiration

Ops-heavy automation for secret rotation windows, owner prompts, and stale-secret detection across enterprise credential stores. Practical SRE tooling for credential hygiene.