From c80a2e4495f877bc0f6a522e99b511de6c0d525d Mon Sep 17 00:00:00 2001 From: Aditya Rajan Date: Tue, 30 Nov 2021 14:15:53 +0530 Subject: podman-remote: prevent leaking secret into image Prevents temp secrets leaking into image by moving it away from context directory to parent builder directory. Builder directory automatically gets cleaned up when we are done with the build. Signed-off-by: Aditya Rajan --- test/e2e/build/Dockerfile.with-secret-verify-leak | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 test/e2e/build/Dockerfile.with-secret-verify-leak (limited to 'test/e2e/build') diff --git a/test/e2e/build/Dockerfile.with-secret-verify-leak b/test/e2e/build/Dockerfile.with-secret-verify-leak new file mode 100644 index 000000000..0957ac6a6 --- /dev/null +++ b/test/e2e/build/Dockerfile.with-secret-verify-leak @@ -0,0 +1,3 @@ +FROM alpine +COPY * / +RUN --mount=type=secret,id=mysecret cat /run/secrets/mysecret -- cgit v1.2.3-54-g00ecf