CIAgent
1a88ab3199
The v0.8 milestone: installable on any Debian-based server via docker (Gitea registry image, honest sandbox degrade), deb (amd64+arm64, advisory postinst), and arch-aware binary — with release consistency enforced by pre-commit hooks + Gitea Actions (3-runner fleet on CT 113, machine-made releases with the full 8-asset matrix + registry image), the CLI carrying the full suite (guide, channel-aware doctor), and the admin runbook (deploy/README.md, evidence-backed recipes). ---ci--- phase: 6 milestone: v0.8 status: complete requirements: covered: [REQ-8-001, REQ-8-002, REQ-8-003, REQ-8-004, REQ-8-005] partial: [] ---/ci---
30 lines
500 B
Plaintext
30 lines
500 B
Plaintext
# Build context hygiene (v0.8 P2): secrets and runtime droppings never
|
|
# enter an image layer. The .env* exclusion is the hard rule — the v1.8
|
|
# class of leak (tokens) must be structurally impossible here.
|
|
.git
|
|
.gitignore
|
|
.dockerignore
|
|
.env
|
|
.env.*
|
|
**/.env
|
|
**/.env.*
|
|
!.env.example
|
|
.ciagent
|
|
**/.ciagent
|
|
**/.venv
|
|
**/node_modules
|
|
**/__pycache__
|
|
**/*.pyc
|
|
**/.pytest_cache
|
|
**/.mypy_cache
|
|
**/.ruff_cache
|
|
**/.turbo
|
|
**/coverage
|
|
**/dist
|
|
apps/web/out
|
|
apps/web/.next
|
|
**/*.tsbuildinfo
|
|
.turbo
|
|
node_modules
|
|
*.log
|