From 3d57b151957bbf90da56d880cd7dc02c02ef3f9b Mon Sep 17 00:00:00 2001
From: Artem Filin <221041513+ArtemFilin1990@users.noreply.github.com>
Date: Tue, 20 Oct 2026 17:55:45 -0700
Subject: [PATCH] Prevent local secrets, VCS metadata and generated caches from
 entering Docker images

---
 .dockerignore | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 .dockerignore

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..9b9666c
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,24 @@
+# Local credentials and VCS metadata must never enter container images
+.git/
+.github/
+.env
+.env.*
+!.env.example
+**/*.pem
+**/*.key
+.venv/
+venv/
+__pycache__/
+**/__pycache__/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+coverage_html/
+node_modules/
+dist/
+build/
+extracted_archives/
+*.log
+*.tmp