Answer
They exclude build tools from final images and include only minimal artifacts.
Quick Answer
Multi-stage builds compile dependencies in a build stage that includes compilers, SDKs, and tools. Only the final artifact (compiled binary, dist folder) gets copied into a clean runtime stage. Build-time secrets, intermediate files, and tool vulnerabilities never reach the final image — they stay in the discarded build stage.
S
SugharaIQ Editorial Team
Verified Answer
This answer has been peer-reviewed by industry experts holding senior engineering roles to ensure technical accuracy and relevance for modern interview standards.
Want to bookmark, take notes, or join discussions?
Sign in to access all features and personalize your learning experience.
Source: SugharaIQ