undefined | Better HN

0 pointshiddew4mo ago0 comments

> For stuff like security keys you should typically add them as build args, not as content in the image.

Do not use build arguments for anything secret. The values are committed into the image layers.

0 comments

Yep. The only valid usecase I think of is using the secret for something else, eg connecting to an internal package registry, in which case the secret mounts may help.

j / k navigate · click thread line to collapse

0 pointshiddew4mo ago0 comments

> For stuff like security keys you should typically add them as build args, not as content in the image.

Do not use build arguments for anything secret. The values are committed into the image layers.

0 comments

never_inline4mo ago

Yep. The only valid usecase I think of is using the secret for something else, eg connecting to an internal package registry, in which case the secret mounts may help.

j / k navigate · click thread line to collapse