Summary
There is no .dockerignore, and the Dockerfile does COPY . . twice, so the entire working tree (including a possibly-huge target/, .git/, local *.db) is sent to the build context.
Location
Dockerfile:7, 14 (COPY . .), no .dockerignore present.
Details & impact
Slow builds, bloated context, risk of leaking a local stellargate.db or .env into image layers.
Suggested fix
Add .dockerignore excluding target/, .git/, *.db, .env, etc.
Acceptance criteria
- Build context excludes build artifacts and secrets.
Summary
There is no
.dockerignore, and the Dockerfile doesCOPY . .twice, so the entire working tree (including a possibly-hugetarget/,.git/, local*.db) is sent to the build context.Location
Dockerfile:7, 14(COPY . .), no.dockerignorepresent.Details & impact
Slow builds, bloated context, risk of leaking a local
stellargate.dbor.envinto image layers.Suggested fix
Add
.dockerignoreexcludingtarget/,.git/,*.db,.env, etc.Acceptance criteria