medium10 pts · first answer countsdevsecopsdockersecrets

Private registry token during build

`npm ci` inside a Dockerfile needs a private registry token. Passing it with ARG leaves it in the image history. What is the safer method?

A.COPY the .npmrc file and delete it in the next stepB.Hard-code the token but use a multi-stage buildC.RUN --mount=type=secret with docker build --secretD.Set the token with ENV and unset it at the end

Discussion 0

Join free to post in the discussion.

Private registry token during build

Discussion 0

Related questions