Secrets and Environment Variables in Docker

Most leaked credentials aren't the result of a clever attack. Someone ran COPY . . with a .env file in the folder and pushed the image. Someone pasted the output of docker compose config into a GitHub