Building Security into Enterprise CI/CD Pipelines
In this demo, learn how HashiCorp can secure and accelerate your CI/CD pipelines with the HashiCorp Cloud Platform on top of GitHub.
The Demo Covers:
GitHub Actions and Terraform Cloud for Business (TFC-B)
- GitHub Actions calling Terraform Cloud
- Fine grained access control from GitHub Actions to TFC-B
- Terraform Cloud retrieving AWS credentials via OIDC
- Provisioning infrastructure
GitHub Actions and HCP Vault
- Triggered by code change
- GitHub Actions OIDC communicates with Vault/Terraform Cloud (without passwords)
- GitHub Actions workflow calls out to HCP Vault to retrieve secrets.
đź“š Resources
- Slides Building Security into Enterprise CI/CD Pipelines
- Case Study: How GitHub uses HashiCorp
- White Paper: Cloud Operating Model
- Blog: How to build a consistent workflow for development and operations teams