Kind of. build_args
aren’t exactly trustable custodians for your super secret secrets (ref). Fly’s secrets
infrastructure is backed by a software security module, which (on-paper at least) has stricter guarantees and stringent access controls than ENV
s set in docker images (ref).
1 Like