How to securely manage credentials in shell scripts?

I need to improve security over a set of shell scripts which have hardcoded credentials. I’m wondering what is the state of the art on this subject. I’ve read about gpg, hashicorp vault, pass command, but still wonder what you guys are doing.