You can also use talisman to make sure you are not checking in secrets in dockerfiles https://github.com/thoughtworks/talisman