Files
cacti/.dockerignore
Thomas Vincent e2a5f32ee9 fix(ci): [develop] harden dependency installs and Docker build boundaries (#8294)
* security(ci): constrain dependency installs and container build boundaries

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* fix(docker): retain shipped runtime libraries in build context

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* fix(tooling): quote gettext paths and honor Docker base selection

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* test(auth): use certificate expiry truth in rendering assertions

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* fix(tooling): finish Docker layer and regex scan findings

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* fix(ci): preserve documentation badge anchors without alternation

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* test(ci): preserve contributor badges and enforce Python coverage

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* ci: share changed-code coverage contracts and enforce shell policy

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* fix(ci): enforce private review files and run path regressions

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* test: measure changed gettext shell coverage

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* test: pin coverage to the reviewed PR revision

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

---------

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
2026-10-14 22:52:37 -04:00

50 lines
920 B
Plaintext

.git
.github
# check-changelog.py is a composer 'check' step
!.github/scripts
*.md
!README.md
LICENSE
.pre-commit-config.yaml
.env
.env.local
docker-compose.override.yml
data/
cache/
# the tracked redirect guards are part of the sink inventory
!cache/index.php
!cache/**/index.php
log/
!log/index.php
rra/*.rrd
*.log
# Local runtime configuration and credentials never belong in build layers.
.env.*
**/.env
**/.env.*
!/.env.example
**/.ssh
**/.aws
**/.gnupg
include/config.php
include/config_local.php
# Keep shipped runtime libraries; omit locally installed Composer packages.
include/vendor/*
!include/vendor/GoogleAuthenticator/
!include/vendor/parsedown/
!include/vendor/phpgettext/
!include/vendor/index.php
!include/vendor/composer/
include/vendor/composer/*
!include/vendor/composer/index.php
node_modules/
**/node_modules/
**/*.pem
**/*.key
**/*.p12
**/*.pfx
**/.DS_Store
node_modules/
tests/e2e/node_modules/