Build args with secrets still show in docker history on old images Infrastructure
We passed an npm auth token as a for months. We've since moved to BuildKit secrets, but images built during that window are still in our registry and shows the value in plain text. How bad is this in practice, and is…