Commit graph

5 commits

Author SHA1 Message Date
RocketQuack
4e5f84fa29 chore: remove comments about why BuildKit is being used to parse apps.json 2026-04-15 13:52:31 +02:00
OmarElaraby26
ae275df161 fix(security): replace APPS_JSON_BASE64 build-arg with BuildKit secret mount
APPS_JSON_BASE64 is stored in image layer metadata, permanently exposing
private repo tokens (GitHub PATs) to anyone with image pull access.

Replace --build-arg with --mount=type=secret so that apps.json is only
available during the RUN step and never committed to any layer.

Refs: https://docs.docker.com/reference/build-checks/secrets-used-in-arg-or-env/
2026-04-05 22:24:53 +02:00
david-loe
4a29d63c52
Update Frappe branch version to 16 2026-01-31 09:08:17 +01:00
Revant Nandgaonkar
a919f44505
docs: quick build command (#1500)
* docs: quick build command

* chore: fix pre-commit lint for md file
2024-10-27 14:45:41 +05:30
Revant Nandgaonkar
8ac69bb501
feat: allow layered custom image build (#1497)
speed up build time
pull builder image
pack built assets into base image
2024-10-25 14:08:24 +05:30