docker/build-push-action
1
0
Fork 0
mirror of https://github.com/docker/build-push-action.git synced 2025-04-03 13:40:07 +02:00
Code Activity

Merge d60df21dda into 48888e0b13

Browse source
This commit is contained in:
Emanuel Fernandes 2022-10-07 18:34:16 +02:00 • committed by GitHub
commit 68fbf4afc2
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
docs/advanced/secrets.md
View file

@ -13,6 +13,23 @@ RUN --mount=type=secret,id=github_token \
cat /run/secrets/github_token
```
If you need access to the `secrets` file from a non-root user, you'll need to set the `uid` in the `--mount` argument:
```Dockerfile
#syntax=docker/dockerfile:1.2
FROM alpine
# Create non-root user
RUN addgroup -S newuser && adduser -u 1001 -S -g newuser newuser
# Run everything after as non-privileged user.
USER newuser
RUN --mount=type=secret,uid=1001,id=github_token \
cat /run/secrets/github_token
```
As you can see we have named our secret `github_token`. Here is the workflow you can use to expose this secret using
the [`secrets` input](../../README.md#inputs):