Techniques for securing computing environments via software images containing embedded secrets

A non-transitory computer-readable medium having stored thereon instructions for causing a processing circuitry to execute a process, the process comprising:

• generating a plurality of software packages, wherein each software package is generated using a respective set of code, wherein a first software package of the plurality of software packages includes code that configures a server to secure a computing environment based on a secret when executed;
• building a software image based on a file, wherein the file includes a set of instructions for combining a subset of the plurality of software packages including the first software package and for embedding the secret in order to build the software image, wherein building the software image further comprises combining the subset of the plurality of software packages according to the file, wherein building the software image further comprises embedding the secret in the software image;
• and
• providing the software image for execution, wherein the software image is executed by the server, wherein the software image configures the server to deploy a software component based on the subset of the plurality of software packages when executed.

A system for securing software images, comprising:

• a processing circuitry;
• and
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• generate a plurality of software packages, wherein each software package is generated using a respective set of code, wherein a first software package of the plurality of software packages includes code that configures a server to secure a computing environment based on a secret when executed;
• build a software image based on a file, wherein the file includes a set of instructions for combining a subset of the plurality of software packages including the first software package and for embedding the secret in order to build the software image, wherein building the software image further comprises combining the subset of the plurality of software packages according to the file, wherein building the software image further comprises embedding the secret in the software image;
• and
• provide the software image for execution, wherein the software image is executed by the server, wherein the software image configures the server to deploy a software component based on the subset of the plurality of software packages when executed.