Equivalent of Docker's --secret

[maxxer]

Hi. I'm trying to convert my Google Cloud Run gcr.io/cloud-builders/docker steps to kaniko.

I currently leverage docker's secrets arguments, i.e --secret id=GIT_AUTH_JSON,env=GIT_AUTH_JSON, used in the Dockerfile as (for example)

RUN --mount=type=secret,id=GIT_AUTH_JSON,mode=0444,dst=/var/www/beconcierge/auth.json composer install --no-progress

I see there's no such option in kaniko, I should probably use --build-arg. This is however deprecated for Docker, as build history could keep track of the value. Is this the case for kaniko as well?

thanks

[maxxer]

A possible workaround on SO: https://stackoverflow.com/q/75442435/738852

Additional solution #2368 (comment)