Docker and CI/CD · Senior · Question 19 of 75
Why are environment variables not ideal for highly sensitive secrets?
- ✓Correct answer: They leak via inspect output, child processes and crash dumps
- 2They can't be changed without rebuilding the image
- 3They are limited to 64 characters on most Linux systems
Explanation
Anyone with docker inspect or access to /proc can read them, and error reporters often capture the environment. Mounted files from a secret store with short lifetimes are safer.