Docker

Don't Embed Secrets in Docker Images

Docker best practice:

Don't store secrets in Docker images.

Instead, they should be injected via:

1. Environment variables (at run-time)
2. Build-time arguments (at build-time)
3. An orchestration tool like Docker Swarm (via Docker secrets) or Kubernetes (via Kubernetes secrets)

For more along with examples, check out Don't Store Secrets in Images.