Secrets where your code builds, ships, and runs.
SikkerKey connects to your entire stack. Push secrets into CI/CD platforms, rotate database credentials automatically, authenticate workloads at runtime, and read values through SDKs in every major language.
Sync
Push secrets into the platform’s native variable storage. Your workflows, functions, and pipelines read them natively.
GitHub Actions
Install the SikkerKey GitHub App, select repos, and your workflows fetch secrets on every run. Automated machine provisioning and workflow file commits.
AutomatedGitLab CI/CD
Connect via OAuth, push CI/CD variables, and commit pipeline configurations. File-type variables keep PEM keys out of logs.
AutomatedBitbucket Pipelines
Push secured pipeline variables with base64-encoded credentials. Single-step setup from the dashboard with automatic workspace discovery.
AutomatedSupabase Edge Functions
Push secrets to Supabase Edge Function secrets. Functions read them natively via Deno.env.get() with no redeploy on change.
AutomatedRotation
Managed credential rotation on a schedule. SikkerKey generates new values and the agent applies them to the target system.
PostgreSQL
Automated password rotation for Postgres roles. Agent runs next to your database, applies ALTER ROLE, and verifies. Database never exposed to the internet.
AvailablePostgreSQL (Supabase)
Rotate Supabase database credentials through Supavisor. Project reference field handles tenant routing; agent connects via the session pooler.
AvailableMySQL
Rotate MySQL user passwords on a schedule. Agent authenticates locally, applies ALTER USER, and reports health back to the dashboard.
AvailableRedis
Rotate Redis ACL user passwords. Agent handles Redis-native ACL SETUSER commands and verifies every rotation before promoting.
AvailableMongoDB
Rotate MongoDB user passwords via changeUserPassword. Agent authenticates with your admin credentials and reports heartbeat health.
AvailableWorkloads
Machine authenticates at runtime and reads secrets on demand via the CLI or SDK.
Docker
Inject secrets into containers at runtime. Mount credentials via the SikkerKey CLI without baking them into images.
AvailableKubernetes
Bootstrap machines inside pods and fetch secrets at startup. Native kubectl secret creation from the CLI.
AvailableAny CI/CD
Generic bootstrap for Jenkins, CircleCI, Travis, Azure DevOps, or any platform. One curl command to provision a machine.
AvailableSDKs
Native clients for the languages your services run in.
Don't see your platform?
We're always adding new integrations. Let us know what you need.
Request Integration