# Build-context hygiene (G-015): no secrets, state, or build artifacts
# may enter an image build context.
.git
.env
.env.*
data/
*.db
*.log
dist/
__pycache__/
tests/
.ciagent/
# Nested matches too (P3-03, CWE-693): the root-anchored `__pycache__/`
# above misses cli/__pycache__/*.pyc — build artifacts must stay out of
# the context wherever they sit in the tree.
**/__pycache__/
**/*.pyc