Docker

Secrets leak through build args in Docker

DockerENV & ARGSecretsadvanced

What this snippet does

Build args are recorded in the image history, so anyone with the image can read the value.

Expected output

ARG API_KEY=s3cret

Why practise typing this

Typing env & arg code builds muscle memory for the symbols and indentation Docker uses most, which prose-based typing tests never cover. DevType measures your words per minute and accuracy on this snippet and tracks the individual characters you mistype, so later lessons can target them.

More Docker practice

Browse all Docker snippets →