23 points | by ndhandala 9 hours ago ago
1 comments
> Treat cache mounts like shared volumes: never bake secrets into them and periodically invalidate them with --build-arg CACHE_BUST=$(date +%s) when dependencies change.
Kind of a bummer. If build tools were better, this would never be necessary.
> Treat cache mounts like shared volumes: never bake secrets into them and periodically invalidate them with --build-arg CACHE_BUST=$(date +%s) when dependencies change.
Kind of a bummer. If build tools were better, this would never be necessary.