Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat: Support buildtime Secrets #602

Open
f0o opened this issue Feb 2, 2024 · 0 comments
Open

Feat: Support buildtime Secrets #602

f0o opened this issue Feb 2, 2024 · 0 comments

Comments

@f0o
Copy link

f0o commented Feb 2, 2024

Community Note

  • Please vote on this issue by adding a 馃憤 reaction to the original issue to help the community and maintainers prioritize this request
  • Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
  • If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Build Secrets are exceedingly important to fetch private resources and external dependencies.

Utilizing Build-Args or even Envs will lead to credentials leaked into the final docker image through it's layers and should be discouraged.

Docker provides https://docs.docker.com/build/building/secrets/ to provide secrets into build instructions

New or Affected Resource(s)

  • docker_image

Potential Terraform Configuration

./.

References

@f0o f0o changed the title Feat: Support Secret Feat: Support buildtime Secrets Feb 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant