docker-github-runner/.dockerignore at main · blackoutsecure/docker-github-runner · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
# VCS
.git
.github/
.gitignore
.gitattributes

# Environment and secrets
.env
.env.*

# GitHub Actions runner registration / credential artifacts.
# These are runtime-only files (written by config.sh inside the container).
# Excluding them belt-and-suspenders ensures that even if someone tests the
# runner locally and leaves these in the repo dir, they NEVER end up baked
# into the image build context.
.runner
.credentials
.credentials_rsaparams
.path
runner-secrets/
*_token.txt
*.pat
*.gh-token

# Private key / cert formats
*.pem
*.key
*.p12
*.pfx
id_rsa
id_ecdsa
id_ed25519

# Documentation and metadata (not needed in image)
README.md
LICENSE
readme-vars.yml
logo.png

# Editor and tooling config
.editorconfig
.vscode/
.idea/

# Local development
tmp/
*.log
*.tmp

# Ensure root overlay, build scripts, and Dockerfile context are included
!root/
!build/
!scripts/
!Dockerfile

# >>> bos-automation-hub:docker >>>
# Managed by https://github.com/blackoutsecure/bos-automation-hub — do not edit between markers.
# CI / automation metadata — not needed inside the Docker build context.
.git
.github/
.gitignore
.gitattributes
.dockerignore
.editorconfig

# Editor / IDE noise
.vscode/
.idea/
*.swp
*~

# OS noise
.DS_Store
Thumbs.db
._*

# Documentation / metadata (if your image legitimately needs one of
# these inside the runtime, add a `!README.md` style re-include AFTER
# this managed block — `.dockerignore` is last-match-wins, so a
# re-include placed BEFORE the block would be overridden by these
# excludes).
README.md
LICENSE
SECURITY.md
CHANGELOG.md

# Local env / secrets — NEVER ship inside an image.
.env
.env.*
.secrets/
*.pem
*.key
*.crt
*.p12
*.pfx
# <<< bos-automation-hub:docker <<<

# >>> bos-automation-hub:balena >>>
# Managed by https://github.com/blackoutsecure/bos-automation-hub — do not edit between markers.
# `balena.yml` is rendered by the bos-automation-hub workflow into the
# repo root before `balena push` runs; @balena/compose reads it from the
# build context, so it MUST NOT be excluded.
!balena.yml
# <<< bos-automation-hub:balena <<<