.dockerignore

# ==============================================================================
# Docker Ignore File - Root Directory
# ==============================================================================
# Prevents unnecessary files from being sent to Docker daemon
# Reduces build context size and improves build performance
# Prevents sensitive files from being included in image
# ==============================================================================

# ==============================================================================
# SECURITY - CRITICAL FILES TO EXCLUDE
# ==============================================================================
# Environment files (CRITICAL - contains secrets)
.env
.env.*
.env.local
.env.production
.env.development
.env.test
*.env

# SSL/TLS certificates and keys
*.pem
*.key
*.crt
*.cer
*.p12
*.pfx
*.jks
*.keystore
*.truststore

# SSH keys
.ssh/
*.pub
id_rsa
id_ed25519

# AWS credentials
.aws/
credentials

# Database files
*.db
*.sqlite
*.sqlite3
*.mv.db
*.trace.db
data/

# Logs (may contain sensitive data)
logs/
*.log
npm-debug.log*
yarn-debug.log*
yarn-error.log*

# ==============================================================================
# GIT AND VERSION CONTROL
# ==============================================================================
.git/
.gitignore
.gitattributes
.github/
.gitlab-ci.yml

# ==============================================================================
# IDE AND EDITOR FILES
# ==============================================================================
.idea/
.vscode/
.eclipse/
.settings/
.project
.classpath
*.iml
*.swp
*.swo
*~
.DS_Store
Thumbs.db
desktop.ini

# ==============================================================================
# BUILD ARTIFACTS (will be built inside container)
# ==============================================================================
# Maven
target/
.mvn/
mvnw
mvnw.cmd

# Node.js
node_modules/
.next/
out/
build/
dist/

# Gradle
.gradle/
build/
bin/

# ==============================================================================
# TESTING
# ==============================================================================
coverage/
.nyc_output/
test-results/
junit/
.coverage
htmlcov/

# ==============================================================================
# DOCUMENTATION (not needed in runtime image)
# ==============================================================================
docs/
*.md
README*
LICENSE
CONTRIBUTING*
CHANGELOG*

# Keep essential docs that are referenced in code
!README.md
!LICENSE

# ==============================================================================
# DOCKER FILES (not needed in image)
# ==============================================================================
# Note: Dockerfile itself IS needed for Cloud Build
# Only exclude these specific files:
docker-compose*.yml
.dockerignore
Dockerfile.backend.cloudrun
Dockerfile.frontend.cloudrun

# Docker volumes and data
postgres_data/
oscal-data/
oscal-logs/

# ==============================================================================
# CI/CD
# ==============================================================================
.travis.yml
.circleci/
Jenkinsfile
azure-pipelines.yml
.github/workflows/

# ==============================================================================
# TEMPORARY FILES
# ==============================================================================
tmp/
temp/
*.tmp
*.bak
*.backup
*.old
*.swp
*.swo

# ==============================================================================
# OS FILES
# ==============================================================================
.DS_Store
Thumbs.db
desktop.ini
*.lnk

# ==============================================================================
# DEPENDENCY LOCK FILES
# ==============================================================================
# Keep package-lock.json for npm ci (deterministic builds)
# !package-lock.json
yarn.lock
pnpm-lock.yaml

# ==============================================================================
# SECURITY SCAN RESULTS
# ==============================================================================
trivy-report.json
trivy-report.html
grype-report.json
snyk-report.json
dependency-check-report.html

# ==============================================================================
# JAVA SPECIFIC
# ==============================================================================
*.class
*.jar
*.war
*.ear
hs_err_pid*

# ==============================================================================
# PYTHON (if any)
# ==============================================================================
__pycache__/
*.py[cod]
*$py.class
.Python
venv/
ENV/
env/

# ==============================================================================
# FRONTEND SPECIFIC
# ==============================================================================
# Next.js
.next/
out/

# Production build
build/
dist/

# Cache
.cache/
.parcel-cache/

# ==============================================================================
# KEEP THESE FILES (exceptions to above rules)
# ==============================================================================
# None needed - all required files are explicitly copied in Dockerfile