title: How to pass a Github Secret to a Dockerfile the secure way
body: <p>I want to setup gcloud sdk within a docker build in a github action. Therefore i need to pass a service-account.json to the dockerfile.</p>
  <p>I know i can pass build arguments to the dockerfile and of course i can pass a Github secret here. But now i heard about Docker secrets whose prevent the secrets being read in the docker log. Does one really have to provide a path for the secret? I don't want to save the secret in the repository and i would prefer to use a github secret.</p>
  <p>So any ideas what is the best and most secure way to pass a github secret in a gh action to a dockerfile for building?</p>