Use Github secrets in Dockerfile does not work with Github Actions-CodePudding

I have a Github Action to build image from a Dockerfile located in the same repo with the Github Action.

In the Dockerfile I use sensitive data so I chose to use Github Secrets.

Here is my Dockerfile:

From python:3.9.5

ARG NEXUS_USER
ARG NEXUS_PASS

RUN pip install --upgrade pip

RUN pip config set global.extra-index-url https://${NEXUS_USER}:${NEXUS_PASS}@<my nexus endpoint>
RUN pip config set global.trusted-host <my nexus endpoint>

COPY ./src/python /python-scripts

ENTRYPOINT [ "python", "/python-scripts/pipe.py" ]

Actions builds an image using this Dockerfile:

jobs:
  docker:
      runs-on: self-hosted
        .
        .
        .
        .
        .
        - name: build
          run: |
            docker build -t ${GITHUB_REPO} .

Action fails when calling the Github secrets from Dockerfile. What is the proper way to do that? As you can see I tried to add ARG in Dockerfile but that didn't work as well.

CodePudding user response：

Is not clear where you are calling secrets from the Dockerfile, BTW you could pass the credentials to the build command using the build-arg flag, like:

 docker build \
   --build-arg "NEXUS_USER=${{ secrets.NEXUS_USER }}" \
   --build-arg "NEXUS_PASS=${{ secrets.NEXUS_PASS }}" \
   -t ${GITHUB_REPO} .