habitus

Habitus injects secrets like SSH keys during builds without leaving traces in the final image, as described in the README's problem-solution section for private git repository access.

It uses a build.yml file to define multi-step build chains, enabling complex image creation for compiled languages like Go, allowing separation of compile-time and runtime dependencies.

The cleanup command squashes images to remove unwanted layers, reducing size and attack surface, which is highlighted in the key features for production readiness.

Specified artifacts are copied from built images to the work directory for use in subsequent steps, facilitating multi-stage builds as mentioned in the key features.