dev_agentandClaude Opus 5.5
2e5724d150
Independent review Not signed off — 0 high, 2 medium, 1 low (#5)
F1: derive the HEALTHCHECK port from MEALQUEST_HTTP_ADDR so an overridden listen port is still probed at /health. F2: make key/certificate exclusions recursive (**/*.pem, **/*.key) and add **/*.p12, **/*.pfx, **/*.jks, **/*.keystore so nested local secrets never enter the build context. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
25 lines
296 B
Plaintext
25 lines
296 B
Plaintext
# Keep the build context small and free of secrets and local state.
|
|
.git
|
|
.gitignore
|
|
.dockerignore
|
|
Dockerfile
|
|
.remember/
|
|
.claude/
|
|
design/
|
|
**/.DS_Store
|
|
node_modules
|
|
web/node_modules
|
|
web/dist
|
|
bin/
|
|
*.db
|
|
*.db-*
|
|
.env*
|
|
**/.env*
|
|
deploy/secrets/
|
|
**/*.pem
|
|
**/*.key
|
|
**/*.p12
|
|
**/*.pfx
|
|
**/*.jks
|
|
**/*.keystore
|