Secure registry access with DaggerHow to securely authenticate against OCI registries in your CI/CD pipelines

OpenMeter uses Dagger for programmable CI/CD pipelines in containers, including building and publishing various types of artifacts like Docker images to OCI-compliant registries. The challenge is securely storing credentials when authenticating against these registries. In the early days, Docker stored credentials in plaintext in a file, but today it uses credential helpers to store them securely in an OS's keychain. Dagger handles container image authentication securely during the pipeline lifecycle, but for non-container artifacts like Helm charts, there is still a risk of storing credentials in plaintext on the filesystem. The solution involves creating the registry config file and mounting it into the container to avoid writing credentials to the filesystem. A Dagger module called "registry-config" can be used for this purpose, making authentication against OCI registries more secure for tools like Helm that write credentials to a file.