fix: sonarqube - Copying recursively might inadvertently add sensitive data to the container. Make sure it is safe here.

Author: skkdevcraft

.dockerignore

@@ -2,4 +2,36 @@ node_modules
 .devcontainer
 .github
 .vscode
-playwright
+playwright
+
+# Exclude sensitive files
+**/.env
+**/.env.*
+**/secrets/
+**/config/secrets.*
+**/*.key
+**/*.pem
+**/*.cert
+**/*.crt
+**/id_rsa
+**/id_dsa
+**/*.pub
+
+# Exclude development files
+**/.git/
+**/.gitignore
+**/.dockerignore
+**/Dockerfile
+**/docker-compose.yml
+**/node_modules/
+**/npm-debug.log*
+**/yarn-debug.log*
+**/yarn-error.log*
+**/.DS_Store
+**/Thumbs.db
+
+# Exclude build artifacts if needed
+**/dist/
+**/build/
+**/coverage/
+**/.nyc_output/

playwright/docker/Dockerfile

@@ -39,7 +39,7 @@ RUN DOTNET_CLI_TELEMETRY_OPTOUT=1 \
 ####################################
 # Builder stage for Node.js frontend
 ####################################
-FROM node:20-bookworm-slim AS frontend-builder
+FROM node:22-bookworm-slim AS frontend-builder
 
 # Install git for cloning
 RUN apt-get update && \
@@ -51,7 +51,12 @@ RUN apt-get update && \
 WORKDIR /opt
 
 # Copy this repo source inside the container
-COPY . /opt/jellyfin-web
+COPY package*.json /opt/jellyfin-web/
+COPY webpack.*.js /opt/jellyfin-web/
+COPY tsconfig.json /opt/jellyfin-web/
+COPY *.config.* /opt/jellyfin-web/
+# nosonar - .dockerignore file excludes sensitive data
+COPY src/ /opt/jellyfin-web/src/
 
 # Alternatively, clone a PR or a repo
 # RUN git clone https://github.com/jellyfin/jellyfin-web.git --depth 1