Proposal

Allow secrets to be declared in devcontainer outlining requirements to successfully run the container. All declared secrets in this initial specification would be injected into the container as ENV variables.

Declared secrets would be recommendations not requirements. Missing secrets should not prevent creation of the container.

Example

{ 
  "secrets": [
    { "name": "MY_SECRET", "description": "This is a great description of MY_SECRET." }
  ]
}

Related to https://github.com/github/codespaces/issues/12040