coreci
da15bda6d2
---ci--- phase: 3 milestone: v0.2 status: complete requirements: covered: [REQ-21, REQ-22, REQ-23] partial: [] ---/ci---
17 lines
392 B
Plaintext
17 lines
392 B
Plaintext
# Build-context hygiene (G-015): no secrets, state, or build artifacts
|
|
# may enter an image build context.
|
|
.git
|
|
.env
|
|
.env.*
|
|
data/
|
|
*.db
|
|
*.log
|
|
dist/
|
|
__pycache__/
|
|
tests/
|
|
.ciagent/
|
|
# Nested matches too (P3-03, CWE-693): the root-anchored `__pycache__/`
|
|
# above misses cli/__pycache__/*.pyc — build artifacts must stay out of
|
|
# the context wherever they sit in the tree.
|
|
**/__pycache__/
|
|
**/*.pyc |