docker buildx build --secret id=token,src=./token -t myapp .

Category: Docker

docker buildx build --secret id=token,src=./token -t myapp .

Mount a file as a build secret

Makes ./token available as the secret id=token, readable in the Dockerfile via RUN --mount=type=secret,id=token. Secrets never land in image layers, unlike build args, so they stay out of pushed images. Rotate the token if it ever leaked into a layer.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.