How important credentials can be passed inside a dockerfile without any vulnerability

Question

dockerfile FROM

ENV username = xyz

ENV password = abc

I am passing the username and