epistemophiliac/frappe_docker
1
0
Fork 0
mirror of https://github.com/frappe/frappe_docker.git synced 2026-06-17 13:55:08 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
frappe_docker/docs/02-setup
History
OmarElaraby26 ae275df161 fix(security): replace APPS_JSON_BASE64 build-arg with BuildKit secret mount 
APPS_JSON_BASE64 is stored in image layer metadata, permanently exposing
private repo tokens (GitHub PATs) to anyone with image pull access.

Replace --build-arg with --mount=type=secret so that apps.json is only
available during the RUN step and never committed to any layer.

Refs: https://docs.docker.com/reference/build-checks/secrets-used-in-arg-or-env/
2026-04-05 22:24:53 +02:00
..
01-overview.md refactor: Moved md files back to docs 2026-03-15 18:47:35 +05:30
02-build-setup.md fix(security): replace APPS_JSON_BASE64 build-arg with BuildKit secret mount 2026-04-05 22:24:53 +02:00
03-start-setup.md refactor: Moved md files back to docs 2026-03-15 18:47:35 +05:30
04-env-variables.md refactor: Moved md files back to docs 2026-03-15 18:47:35 +05:30
05-overrides.md refactor: Moved md files back to docs 2026-03-15 18:47:35 +05:30
06-setup-examples.md refactor: Moved md files back to docs 2026-03-15 18:47:35 +05:30
07-single-server-example.md refactor: Moved md files back to docs 2026-03-15 18:47:35 +05:30
08-single-server-nginxproxy-example.md fix(security): replace APPS_JSON_BASE64 build-arg with BuildKit secret mount 2026-04-05 22:24:53 +02:00
index.md refactor: Moved md files back to docs 2026-03-15 18:47:35 +05:30