Is there a way to make a secret available at build time but NOT at runtime? I see that all env vars are passed to docker run and that there’s no way to specify --build-args. I have a secret that’s needed for build but really should not be available in the environment at runtime for strict security. Using a Dockerfile build, is there anyway to accomplish this? Or any plans to allow passing build-time-only vars?
Hi!
This is not possible at the moment. You can upvote for this feature.