Ravi Sir's Cards › Chapter 52: Dockerfile Instructions Explained: FROM, RUN, CMD vs ENTRYPOINT, COPY vs ADD, Multi-Stage and BuildKit
Why not pass secrets with ARG or ENV?
Why not pass secrets with ARG or ENV? Both are visible: ARG in docker history, ENV in docker inspect. Use RUN --mount=type=secret at build and runtime secrets at run.

Lesson: 52.5 ENV vs ARG · मराठी card