pi
291ae5345e
Repo/CI hygiene batch (none base-affecting; image contents unchanged): - LICENSE: actual MIT file (repo previously declared MIT only in prose). - THIRD_PARTY.md: notes bundled software + licenses (pi/pi-fork/pi-obsmem/ pi-studio MIT, gosu Apache-2.0, Debian packages under their own terms). - .dockerignore: trims build context to what the Dockerfiles COPY (rootfs/ + entrypoint*.sh); keeps .git/docs/scripts/compose out. Verified it excludes none of the required COPY sources. - lint.yml: new hadolint job (pinned v2.14.0) lints both Dockerfiles; .hadolint.yaml grandfathers deliberate choices (DL3008/DL3016/DL4006/DL3003/ SC2086, mirroring the shellcheck excludes), fails on anything new at warning+. Verified hadolint exit 0 and the repo shell-guard passes with the new job. - IDEAS.md: parks deferred follow-ups (SHA-pin actions, trivy, buildx SBOM/ provenance, Makefile, renovate). - README/DOCKER_HUB License sections now link LICENSE + THIRD_PARTY.md. No tag.
36 lines
823 B
Plaintext
36 lines
823 B
Plaintext
# Keep the Docker build context minimal and prevent stray files (notably
|
|
# `.git`) from ever being pulled in by a future broad COPY. Both Dockerfiles
|
|
# only COPY `rootfs/` and `entrypoint*.sh`, so everything below is safe to
|
|
# exclude from the context.
|
|
#
|
|
# DO NOT add `rootfs/`, `entrypoint.sh`, `entrypoint-user.sh`, or the
|
|
# Dockerfiles here — they are required to build the image.
|
|
|
|
# VCS / CI metadata
|
|
.git
|
|
.gitea
|
|
.gitignore
|
|
.dockerignore
|
|
|
|
# Lint / editor config
|
|
.hadolint.yaml
|
|
.editorconfig
|
|
|
|
# Docs & project meta
|
|
README.md
|
|
DOCKER_HUB.md
|
|
CHANGELOG.md
|
|
AGENTS.md
|
|
IDEAS.md
|
|
LICENSE
|
|
THIRD_PARTY.md
|
|
docs
|
|
|
|
# Local orchestration & examples (compose runs the image; not a build input)
|
|
docker-compose.yml
|
|
docker-compose.mempalace.yml
|
|
.env.example
|
|
|
|
# Repo tooling / tests (run from a checkout, not baked into the image)
|
|
scripts
|