What's to take out of this?
Anything else than avoid committing secrets to your source code, and especially, don't include clear-text secrets in files when you build containers?
This is also a 2 years old issue. Am I missing a subtile element to this?