Integrating Vault with CI/CD Pipelines - Best Practices and Pitfalls

Learn how to securely integrate HashiCorp Vault into CI/CD pipelines through this 25-minute conference talk presented by security and infrastructure engineers from Cisco and Discover. Explore proven techniques for implementing secrets injection, token handling, and workload identity across popular CI/CD platforms including GitHub Actions, GitLab CI, and Jenkins. Discover essential best practices for maintaining security while automating your deployment workflows, and understand how to avoid common pitfalls such as token reuse, secret sprawl, and environment leakage that can compromise your infrastructure security. Gain insights from real-world implementation examples and secure automation patterns that have been successfully deployed in enterprise environments, helping you build robust and secure CI/CD processes that properly leverage Vault's secrets management capabilities.