Yeah I mean it's not safe, but if you are planing to deploy this only locally, It's not such an issue. To solve it properly, you should use some environmental variable lets say JUPYTER_TOKEN. Then you can have this CMD ["start.sh", "jupyter", "lab", "--LabApp.token=$JUPYTER_TOKEN"] at the end of the Dockerfile. Then you should define JUPYTER_TOKEN var in docker-compose.yml... preferably using .env file. (this .env file should be in .gitignore and not to be pushed to the repo)

Thanks for the input, then I will change this to a draft PR until I have time to look properly into it. If anyone else is annoyed by the messages, they can use the same hack as me locally but we should not pull this change into main.