HashiConf 2025 Recap: Cloud Security, Secrets Scanning and Infrastructure Visibility
· 25:28 · Watch on YouTube ↗
Summary
A sponsored HashiConf 2025 recap covers Packer SBOM visibility, Vault Radar secret scanning, hybrid-cloud identity challenges and approaches to securing shared GPU infrastructure.
Key points
- Packer can generate an SBOM snapshot during an image build, store it as an artifact and expose it as image metadata to help identify newly disclosed vulnerabilities.
- The presenter describes Vault Radar as an IDE-integrated secret-scanning tool that can detect secrets before a commit and move them into Vault.
- GEICO infrastructure engineers discussed the difficulty of applying consistent identity and access controls across hybrid clouds and moving security from legacy networks to workloads.
- A conference session described using virtual clusters to limit the blast radius of shared GPU infrastructure, alongside Vault for secrets management and access control.
- Project infograph was presented as a graph-based system for visibility into multicloud and hybrid-cloud resources, including unmanaged resources and provisioning history.
- Hashi Corp sponsored the video and the presenter's conference trip.
Article Details
- Topics
- [02:42] Packer SBOM visibility and vulnerability tracking
- [03:02] Terraform search for unmanaged infrastructure
- [03:28] Vault Radar pre-commit secret scanning
- [05:01] Hybrid-cloud identity, access and workload security
- [09:30] GPU sharing, virtual-cluster isolation and secrets management
- [11:49] Terraform MCP and project infograph infrastructure visibility
- [21:21] Infrastructure visibility and security in multicloud environments
People
Amari ZubiriGEICO infrastructure engineer who discussed the challenges of moving security from legacy networks to workloads in a hybrid-cloud model.Armon DadgarHashi Corp co-founder and CTO who discussed infrastructure visibility and security as multicloud and AI adoption grow.Brian ChongDirector of infrastructure and security at Rubric who discussed Packer SBOM visibility and its potential use in compliance systems.Rebecca WeeklyGEICO VP of infrastructure engineering who discussed consistent identity and access enforcement across hybrid clouds.Will BankstonHashi Corp platform and security engineering executive who discussed immutable infrastructure and infrastructure visibility.