We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 47b11ff commit 126b78fCopy full SHA for 126b78f
docker/Dockerfile
@@ -14,9 +14,14 @@ WORKDIR /triggerdotdev
14
# Copy .npmrc and use the NPM_TOKEN for private registry
15
ARG NPM_TOKEN
16
COPY .npmrc .npmrc
17
-RUN if [ -f .npmrc ]; then \
+RUN if [ -f .npmrc ] && [ -n "${NPM_TOKEN}" ]; then \
18
echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" >> .npmrc; \
19
fi
20
+
21
+# For better security, use Docker BuildKit secrets
22
+RUN --mount=type=secret,id=npm_token \
23
+ echo "//registry.npmjs.org/:_authToken=$(cat /run/secrets/npm_token)" >> .npmrc
24
25
COPY --chown=node:node .gitignore .gitignore
26
COPY --from=pruner --chown=node:node /triggerdotdev/out/json/ .
27
COPY --from=pruner --chown=node:node /triggerdotdev/out/pnpm-lock.yaml ./pnpm-lock.yaml
0 commit comments