medium10 pts · first answer countsincident-responsesecretscontainers

Deleted secret still in the image

A Dockerfile copies .env with a DB password in one step and deletes it in a later RUN step. The image was pushed to a public registry. Is the password exposed?

A.No; the later delete removes it from every layer of the imageB.No; Docker encrypts all files inside public images by defaultC.Yes; earlier layers still hold the file, so rotate the password nowD.Only if someone runs the container with root privileges

Discussion 0

Join free to post in the discussion.

Deleted secret still in the image

Discussion 0

Related questions