Task
Version · 6.0
Create

Install Liquibase Secure with Maven

Last updated: August 11, 2026

Apache Maven is a software project management and comprehension tool based on the project object model (POM) concept. The Liquibase Secure Maven integration lets you manage your build process and database schema scripts from a central pom.xml file.

If you’re already using Maven with Liquibase Community, refer to our guide on upgrading from Liquibase Open Source to Liquibase Secure.

Some Maven goals are only available with Liquibase Secure. The Maven Goals page lists all available Liquibase goals for use with Maven, with Secure-specific goals marked with a SECURE label.

Before you begin

Install Maven. No action is needed if you already have Maven installed for your project. If you do not have Maven installed, refer to the official Maven installation page.
Ensure java is installed on your computer. You can check if Java is installed by running java -version in the CLI.

Procedure

Create a Liquibase Maven project directory to store all Liquibase files.

You can follow the Maven Standard Directory Layout by placing your Liquibase files, such as the changelog and liquibase.properties, in the src/main/resources folder. This matches the default classpath used by Maven and lets you reference files in your pom.xml with simple relative paths like changelog.sql, instead of needing full or custom paths.

In your Liquibase Maven project directory, create a pom.xml file.

If you are using Maven Standard Directory Layout, you can place this in the root directory of your project

Add your plugin to the pom.xml file.

You can use the following example code.

Be sure to replace your_version with the version of Liquibase you'd like to use. For example, 5.0.0.

Example Code

<plugin>
    <groupId>com.liquibase</groupId>
    <artifactId>liquibase-secure-starter</artifactId>
    <version>your_version</version>
</plugin>

Apply your Liquibase Secure license key.

Include the Liquibase Secure license key in the <properties> section of your pom.xml file:

<liquibaseLicenseKey>key-goes-here</liquibaseLicenseKey/>

For example:

<plugin> <groupId>com.liquibase</groupId> <artifactId>liquibase-secure-starter</artifactId> <version>0-SNAPSHOT</version> <configuration> <changelogFile>com/example/changelog_v4.6.xml</changelogFile> <liquibaseLicenseKey>key-goes-here</liquibaseLicenseKey> </configuration> </plugin>

Note: In older versions of Liquibase, you must use the syntax <liquibaseProLicenseKey> instead of <liquibaseLicenseKey>.

Add Configurations.

Liquibase Maven goals require database connection details, changelog configuration, and other parameters. This example adds some basic configurations, but depending on your goal, you may need to add additional parameters. You can pass these values at runtime, but storing them in the pom.xml file or a separate liquibase.properties file is often easier and more maintainable. In the example code, we are adding configurations to the pom.xml file.

Note: If you choose to store your configurations in the liquibase.properties file, the properties file must reside in the src/main/resources directory or be specified in your search path. Liquibase properties must also be specified in the configuration section of the pom.xml file. These will follow the format <propertyFile>liquibase.properties</propertyFile>

Before using the example code, be sure to:

Set your_version to the version of Liquibase Secure you would like to run
Replace your_changelog_file with a name and extension for your changelog file. We'll create one in the next steps. For now, choose a name and a file format. For example changelog.sql. Liquibase supports.xml, .yaml, and.json formats.
Replace your_db, your_hostname, your_port, and your_db_name to format your JDBC URL.
Replace your_username and your_password.

<plugin>
  <groupId>com.liquibase</groupId>
  <artifactId>liquibase-secure-starter</artifactId>
  <version>your_version</version>
  <configuration>
    <changeLogFile>your_changelog_file</changeLogFile>
    <url>jdbc:your_db//your_hostname:your_port/your_db_name</url>
    <username>dbuser</username>
    <password>dbpassword</password>
  </configuration>
</plugin>

Create a changelog file in the src/main/resources directory with the name of your_changelog_file, such as changelog.sql.

Add changesets to your changelog file.

Use the following examples depending on the format of the changelog you created:

<?xml version="1.0" encoding="UTF-8"?>
<databaseChangeLog
  xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xmlns:ext="http://www.liquibase.org/xml/ns/dbchangelog-ext"
  xmlns:secure="http://www.liquibase.org/xml/ns/secure"
    xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog
        http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-latest.xsd
        http://www.liquibase.org/xml/ns/dbchangelog-ext
        http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-ext.xsd
        http://www.liquibase.org/xml/ns/secure
        http://www.liquibase.org/xml/ns/secure/liquibase-secure-latest.xsd">
  <changeSet id="1" author="Liquibase">
    <createTable tableName="test_table">
      <column name="test_id" type="int">
        <constraints primaryKey="true"/>
      </column>
      <column name="test_column" type="varchar"/>
    </createTable>
  </changeSet>
</databaseChangeLog>

--changeset liquibase:1
CREATE TABLE test_table (
  test_id INT,
  test_column VARCHAR,
  PRIMARY KEY (test_id)
);

databaseChangeLog:
  - changeSet:
      id: 1
      author: Liquibase
      changes:
        - createTable:
            tableName: test_table
            columns:
              - column:
                  name: test_column
                  type: INT
                  constraints:
                    primaryKey: true
                    nullable: false

{
  "databaseChangeLog": [
    {
      "changeSet": {
        "id": "1",
        "author": "Liquibase",
        "changes": [
          {
            "createTable": {
              "columns": [
                {
                  "column": {
                    "name": "test_column",
                    "type": "INT",
                    "constraints": {
                      "primaryKey": true,
                      "nullable": false
                    }
                  }
                }
              ],
              "tableName": "test_table"
            }
          }
        ]
      }
    }
  ]
}

<?xml version="1.0" encoding="UTF-8"?>
<databaseChangeLog
  xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xmlns:ext="http://www.liquibase.org/xml/ns/dbchangelog-ext"
  xmlns:secure="http://www.liquibase.org/xml/ns/secure"
    xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog
        http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-latest.xsd
        http://www.liquibase.org/xml/ns/dbchangelog-ext
        http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-ext.xsd
        http://www.liquibase.org/xml/ns/secure
        http://www.liquibase.org/xml/ns/secure/liquibase-secure-latest.xsd">
  <changeSet id="1" author="Liquibase">
    <createTable tableName="test_table">
      <column name="test_id" type="int">
        <constraints primaryKey="true"/>
      </column>
      <column name="test_column" type="varchar"/>
    </createTable>
  </changeSet>
</databaseChangeLog>

--changeset liquibase:1
CREATE TABLE test_table (
  test_id INT,
  test_column VARCHAR,
  PRIMARY KEY (test_id)
);

databaseChangeLog:
  - changeSet:
      id: 1
      author: Liquibase
      changes:
        - createTable:
            tableName: test_table
            columns:
              - column:
                  name: test_column
                  type: INT
                  constraints:
                    primaryKey: true
                    nullable: false

{
  "databaseChangeLog": [
    {
      "changeSet": {
        "id": "1",
        "author": "Liquibase",
        "changes": [
          {
            "createTable": {
              "columns": [
                {
                  "column": {
                    "name": "test_column",
                    "type": "INT",
                    "constraints": {
                      "primaryKey": true,
                      "nullable": false
                    }
                  }
                }
              ],
              "tableName": "test_table"
            }
          }
        ]
      }
    }
  ]
}

Run the update-sql goal to inspect the SQL before applying changes to your database.

Example Code

mvn liquibase:updateSQL

Deploy your changes by using the update goal.

mvn liquibase:update

After your first update, you will see a new table along with the DATABASECHANGELOG table and DATABASECHANGELOGLOCK table added to the database.

PreviousWhat are environment variables in Docker?NextAdd Liquibase extensions with Maven

Install Liquibase Secure with Maven

Before you begin

Procedure

Create a Liquibase Maven project directory to store all Liquibase files.

In your Liquibase Maven project directory, create a pom.xml file.

Add your plugin to the pom.xml file.

Example Code

Apply your Liquibase Secure license key.

Add Configurations.

Create a changelog file in the src/main/resources directory with the name of your_changelog_file, such as changelog.sql.

Add changesets to your changelog file.

XML

SQL

YAML

JSON

Run the update-sql goal to inspect the SQL before applying changes to your database.

Example Code

Deploy your changes by using the update goal.