Binding a Docker Secret

The trick with buying is it only works on things in your context. With the secret, and this is the important takeaway of what Jay Z is talking about here with all of these - you do it in that run statement. It never gets persisted to any layer, but you get to use all of the things that you did. That's the important part is nobody could go back through and then scrape the stuff from those layers that you didn't want pry nice to see.