Secrets in Images

Sttor Containers scans images for embedded secrets (credentials accidentally baked into layers), and can fail the pipeline if secrets are detected. GitHub

Typical Sources of Secrets in Images

• .env files copied during build
• Private keys or service credentials added for “temporary debugging”
• Build args leaking into layers
• CI artifacts mistakenly included in the image