The principles of building and creating images for containers presuppose that access data (e.g. for databases) is available in the container. Such access data can fall into unauthorised hands via the images themselves, the scripts for creating the images, or the version control of the scripts.

In many cases, access data is also made available as an environment variable at the time a container is created. This presents another threat to the confidentiality of this data.