Never Bake Secrets into Images
Credentials placed in Dockerfiles, image layers, or source repositories can remain recoverable even after a later deletion. Treat image contents as potentially shareable.
Use Docker/Compose secrets where supported or inject secrets from the deployment platform. Rotate credentials if they were accidentally committed or baked into an image.
ADVERTISEMENT