Docker Secrets in Image Layers: Why Deleting Them Doesn't Work
A deleted secret is still inside your Docker image layers. Reproduce the leak step by step with docker history and docker save, then fix it with BuildKit secret mounts, runtime secrets and scanning.