{
  "id": "topic:ci-secrets-management",
  "_kind": "Topic",
  "_file": "domain/topics/topics-cicd.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "CI Secrets Management",
    "description": "CI Secrets Management as a cross-cutting topic - securely injecting credentials\nand sensitive configuration into pipeline jobs without exposing them in logs\nor artifacts. Covers GitHub Actions encrypted secrets and environment protection\nrules, OIDC-based short-lived token federation (AWS, GCP, Azure), HashiCorp\nVault dynamic secrets, secret scanning to prevent accidental commits, and\nthe principle of least-privilege for pipeline service accounts.\n"
  },
  "outgoingEdges": [
    {
      "from": "topic:ci-secrets-management",
      "to": "domain:devops",
      "kind": "applies_to"
    },
    {
      "from": "topic:ci-secrets-management",
      "to": "domain:cybersecurity",
      "kind": "applies_to"
    }
  ],
  "incomingEdges": [
    {
      "from": "domain:cybersecurity",
      "to": "topic:ci-secrets-management",
      "kind": "contains"
    },
    {
      "from": "domain:devops",
      "to": "topic:ci-secrets-management",
      "kind": "contains"
    }
  ]
}