The secrets are not being applied in the gitaction docker/build-push-action

[aitrics-ray]

https://docs.docker.com/build/ci/github-actions/secrets/
I attempted to verify if the secrets were correctly applied based on the above link, but contrary to my expectations, it did not work.

Here is a question similar to mine. Pass secrets from git action to docker image as env variable

• Git action

      - uses: docker/setup-qemu-action@v3
      - uses: docker/setup-buildx-action@v3
      - uses: docker/build-push-action@v5
        with:
          context: apps/vc-screening-service
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          secrets: |
             VC_MYSQL_USER=${{ secrets.VC_MYSQL_USER }}

• Dockerfile

# syntax=docker/dockerfile:1
FROM alpine
RUN --mount=type=secret,id=VC_MYSQL_USER \
  VC_MYSQL_USER=$(cat /run/secrets/VC_MYSQL_USER)

Git Action Output enter image description here

Docker run output

docker run -it 997245385850.dkr.ecr.ap-northeast-2.amazonaws.com/dev/vc-screening-service:latest sh
/ # env
HOSTNAME=6a893ca9c566
SHLVL=1
HOME=/root
TERM=xterm
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/
/ #

The environment variable VC_MYSQL_USER is missing. What did I do wrong here?

[mabasic]

Try wrapping VC_MYSQL_USER=${{ secrets.VC_MYSQL_USER }} in quotes like so:

      - uses: docker/setup-qemu-action@v3
      - uses: docker/setup-buildx-action@v3
      - uses: docker/build-push-action@v5
        with:
          context: apps/vc-screening-service
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          secrets: |
             "VC_MYSQL_USER=${{ secrets.VC_MYSQL_USER }}"

in the docker file you must call the build command in the same RUN command as you export the variable.