credential-rotation

High-performance credential and proxy scheduling for distributed workers. | 高性能分布式凭据与代理调度服务。

Supply Chain Firewall — block compromised packages, close the Ghost Gap, cure infections. Zero dependencies.

One-click Claude Code account switcher - rotate which account pays without touching your projects or history. MIT.

苹果ID轮转系统：基于 Python、SQLite、Fernet、TOTP、只读 IMAP 与 React 的开源凭据轮转框架，面向自有或获授权测试账号｜Open-source Apple ID credential rotation framework

Keeps ArgoCD's downstream cluster registrations valid using short-lived ServiceAccount tokens it mints and rotates itself, replacing the permanent credential that argocd cluster add leaves behind.

Securing Google Kubernetes Engine (GKE) clusters using IAM RBAC controls, Pod Security Admission (PSA) policies, and credential/IP rotation. 🔒✨

Interval model of credential lifecycle events that answers rotation and overlap over a time range

HashiCorp Vault Solace Plugin

A working privileged access management lab. Conjur OSS as the credential vault with policy-based rotation and a tested RBAC boundary, and Apache Guacamole as a session proxy recording every SSH and RDP session to two isolated targets.

SPIFFE-style workload identity broker for AI agents. Short-lived JWT-SVIDs, audience binding, zero long-lived API keys. Zero-trust identity layer for agent fleets.

Credential lifecycle for Azure VMs that cannot use Windows LAPS or Entra login

AWS incident simulation documenting recovery from loss of MFA access after offboarding failure. Covers IAM investigation, CLI recovery, internal verification, RCA, and preventive measures — based on SME experience in AWS account security.

Keep Vapi BYO-SIP-trunks alive on flaky carriers. systemd-based health check with auto credential rotation.

Just-in-time credentials for authenticated Greenbone/OpenVAS vulnerability scans - the Active Directory scan account stays disabled with a password nobody holds, enabled and rotated only for the scan window.

Automated credential rotator for MongoDB Atlas users tied to GCP Cloud Run Services and Jobs. Uses Terraform + Python to dynamically create per-service database users with strong random passwords and output secure connection strings.

Defensive Python CLI that enforces credential rotation policies from metadata inventories and fails CI when credentials are expired, stale, or missing rotation data.

Evidence-only DSH plugin for credential retirement settlement

Monitor Microsoft Entra ID app and service-principal credentials for upcoming expiration

Ops-heavy automation for secret rotation windows, owner prompts, and stale-secret detection across enterprise credential stores. Practical SRE tooling for credential hygiene.