How do you manage secrets in a CI/CD pipeline without compromising security?

Example Concept: Use a secrets management tool like HashiCorp Vault or AWS Secrets Manager to securely store and manage sensitive information such as API keys, passwords, and certificates. Integrate these tools with your CI/CD pipeline by using environment variables or secure APIs to fetch secrets at runtime, ensuring they are not hardcoded in your codebase or exposed in logs. Implement role-based access controls and audit logging to monitor and restrict access to secrets, enhancing security and compliance.