As an example, we’re going to build a minimal web server in a Docker container. In the interests of keeping it simple we’ll use Flask ... to pick an image which has Python already installed.

Scrubbing tokens from source code is not enough, as shown by the publishing of a Python Software Foundation access token with administrator privileges to a container image on Docker Hub.