Commit 8d854dc
committed
fix: add .dockerignore to prevent sensitive data in Docker images
- Create comprehensive .dockerignore to exclude sensitive files
- Exclude .env files, secrets, credentials, git files
- Exclude virtual envs, build artifacts, test files, docs
- Add security comment to Dockerfile line 70
- Prevents CWE-668 and CWE-497 vulnerabilities
- Addresses security concern with COPY . . directive1 parent 3894a60 commit 8d854dc
1 file changed
Lines changed: 2 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
67 | 67 | | |
68 | 68 | | |
69 | 69 | | |
| 70 | + | |
| 71 | + | |
70 | 72 | | |
71 | 73 | | |
72 | 74 | | |
| |||
0 commit comments