We all know .env files are supposed to be gitignored. And they usually are. But beyond the git risk, having credentials stored in plaintext just feels bad. If you leave your laptop unlocked at a coffee shop or someone gets access to your machine, those .env files are sitting right there — high-value targets with zero protection.
What makes this a privilege escalation rather than a misconfiguration is the sequence of events.
。关于这个话题，safew官方版本下载提供了深入分析
13:48, 27 февраля 2026Из жизни
第五十四条 强买强卖商品，强迫他人提供服务或者强迫他人接受服务的，处五日以上十日以下拘留，并处三千元以上五千元以下罚款；情节较轻的，处五日以下拘留或者一千元以下罚款。
This is the key insight: the build language is not baked into BuildKit. It’s a pluggable layer. You can write a frontend that reads a YAML spec, a TOML config, or a custom DSL, and BuildKit will execute it the same way it executes Dockerfiles.