upd init dockerfile

Author: Leonid Podolinskiy

.github/workflows/init_container.yaml

@@ -41,8 +41,9 @@ jobs:
         file: ./lightrun-init-agent/Dockerfile
         push: true
         tags: "lightruncom/k8s-operator-init-java-agent-linux:${{steps.set_tag.outputs.TAG_NAME}}"
-        build-args: |
+        secrets: |
           GITHUB_TOKEN=${{ secrets.PRETTY_GITHUB_READ_TOKEN }}
+        build-args: |
           VERSION=${{ inputs.release_tag }}
           FILE=agent.zip
 
@@ -53,8 +54,9 @@ jobs:
         file: ./lightrun-init-agent/Dockerfile
         push: true
         tags: "lightruncom/k8s-operator-init-java-agent-alpine:${{steps.set_tag.outputs.TAG_NAME}}"
-        build-args: |
+        secrets: |
           GITHUB_TOKEN=${{ secrets.PRETTY_GITHUB_READ_TOKEN }}
+        build-args: |
           VERSION=${{ inputs.release_tag }}
           FILE=agent-alpine.zip
           

lightrun-init-agent/Dockerfile

@@ -1,12 +1,13 @@
 FROM --platform=linux/amd64 alpine:latest
 
-ARG GITHUB_TOKEN
 ARG VERSION 
 ARG FILE 
 
 RUN apk --no-cache add jq \
                        wget
-RUN export REPO="lightrun-platform/athena"; \
+RUN --mount=type=secret,id=GITHUB_TOKEN \
+    GITHUB_TOKEN=$(cat /run/secrets/GITHUB_TOKEN) \
+    export REPO="lightrun-platform/athena"; \
     # curl inside alpine can't properly forward cookies when downloading asset, hence wget
     wget -q --auth-no-challenge --header='Accept:application/octet-stream' \
     https://$GITHUB_TOKEN:@api.github.com/repos/$REPO/releases/assets/`wget -q -O- --auth-no-challenge --header "Accept: application/vnd.github+json"  https://$GITHUB_TOKEN:@api.github.com/repos/$REPO/releases | jq ". | map(select(.tag_name == \"$VERSION\"))[0].assets | map(select(.name == \"$FILE\"))[0].id"` \