Why and how GitHub encrypts sensitive database columns using ActiveRecord::Encryption

This post details the migration strategy for converting existing plaintext or previously encrypted data to the new ActiveRecord encryption standard. It covers handling key rotation and the use of a previous encryptor strategy and feature flags for safe rollout. It also introduces the MaintenanceTasks gem for better management.