What is the correct workflow for utilising secrets during deployment?

Kind of. build_args aren’t exactly trustable custodians for your super secret secrets (ref). Fly’s secrets infrastructure is backed by a software security module, which (on-paper at least) has stricter guarantees and stringent access controls than ENVs set in docker images (ref).

1 Like