Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build: clarify that attestations expose build args #19281

Merged
merged 1 commit into from
Feb 1, 2024

Conversation

dvdksn
Copy link
Contributor

@dvdksn dvdksn commented Feb 1, 2024

Proposed changes

People need to stop using build arguments for secrets.

Signed-off-by: David Karlsson 35727626+dvdksn@users.noreply.github.com

Related issues (optional)

moby/buildkit#4608

Copy link

netlify bot commented Feb 1, 2024

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit ec5847e
🔍 Latest deploy log https://app.netlify.com/sites/docsdocker/deploys/65bba2ad47cfb40008ae3561
😎 Deploy Preview https://deploy-preview-19281--docsdocker.netlify.app/build/attestations/slsa-provenance
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@github-actions github-actions bot added the area/build Relates to Dockerfiles or docker build command label Feb 1, 2024
@dvdksn dvdksn force-pushed the docs-clarify-buildargs-leak-secrets branch 2 times, most recently from 6ff1d64 to 605abba Compare February 1, 2024 13:50
@dvdksn dvdksn requested a review from crazy-max February 1, 2024 13:50
People need to stop using build arguments for secrets.

Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
@dvdksn dvdksn force-pushed the docs-clarify-buildargs-leak-secrets branch from 605abba to ec5847e Compare February 1, 2024 13:54
@dvdksn dvdksn requested a review from crazy-max February 1, 2024 13:55
Copy link
Member

@crazy-max crazy-max left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🚀

@dvdksn dvdksn merged commit 9019a67 into docker:main Feb 1, 2024
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/build Relates to Dockerfiles or docker build command
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants