PostgreSQL and DevSecOps Ensuring database security in DevSecOps
summary
Pipeline makes Jenkins the central CI/CD hub and enforces database schema versioning alongside app releases; secrets use HashiCorp Vault key store or HSMs (Nitrokey / UBS HSM) and pgAudit for DB logging. Encryption options include PGcrypto for column encryption, LUKS or full-disk for at-rest, and TLS 1.2 for transit. Data masking is done by transform or regex; config and checklist automation replace manual steps. Transparent disk encryption costs about 5–7% performance hit but prevents data loss.
AI-written summary · about
chapters (6)
- 0:00Introduction to DevSecOps
- 3:43Security in DevSecOps pipeline
- 11:40PostgreSQL database security
- 22:57Compliance and controls
- 29:35Automation and management
- 33:26Implementing DevSecOps
related talks
38mPostgreSQL and DevSecOps: Ensuring database security
50mPostgreSQL Security. How Do We Think?
50mSecuring PostgreSQL
36mUnlocking the Benefits of Database DevOps and Automation
44mWho's managing the credentials for your database?
07mAll about Postgres security
28mFrom Dev to Prod: Securing Postgres the Right Way
40mPoastgreSQL Auditing, Authentication, and Security