How to Inject Secrets Into Docker Containers Without Baking Them Into the Image

One of the most common Docker mistakes is embedding secrets into the image build. It seems convenient: set ENV DATABASE_URL=... in the Dockerfile and the container always has the right value available when it starts. The problem is that container ima...