Blog

actionshackathon21 |githubactions |devsecops |github

GitHub Actions Hackathon 2021 - Automate Password Rotation using GitHub Actions

Marcel.L

Posted on November 9, 2021

GitHub Actions Hackathon 2021 - Automate Password Rotation using GitHub Actions

💡 How to rotate VM passwords using GitHub Actions and Azure Key Vault

I decided to submit one of my github Actions hacks I did earlier this year as part of this years ActionsHackathon21 contest.

In my original post I demonstrate how we can implement a zero-touch fully automated solution under 15 minutes to rotate all our virtual machines local administrator passwords on a schedule by using a GitHub Actions workflow and a centrally managed Azure key vault. (The technique/concept used in the tutorial is not limited to only Virtual machines. The same concept can be used and applied to almost anything that requires secret rotation).

Here is the link to the original post, enjoy!

Automate password rotation with GitHub and Azure (Part 1)

Marcel.L ・ May 17 '21

#githubactions #devsecops #github #azure

Submission Category: Wacky Wildcards

😳💥🔥 I know... ITSec Ops workflows are totally WACKY! 🔥💥😳

Yaml File or Link to Code

Pwd9000-ML / Azure-VM-Password-Management

This repository is used to maintain Azure VM local admin passwords using an Azure Key vault

Azure-VM-Password-Management

This repository hosts a github workflow which is used to maintain Azure VM local admin passwords using an Azure Key vault. See my blog post for full details 😄

Zero-touch fully automated password rotation using Github workflows and Azure key vault.

Video tutorial

Use the GitHub marketplace Action

AZURE Virtual machine password rotation has also been made into a GitHub Action which is public on the GitHub marketplace.
For more details. Check it out here: Rotate AZURE Virtual Machine Passwords