Keep .git/config out of the Docker build context (closes #269)

.git goes into the build so `make build` can stamp the version, and with it went .git/config, where a remote URL can carry a credential that then stays in the builder stage's layers on the build host. `git describe` does not need it, so .dockerignore now leaves it out. Model: opus-5-5
2026-10-02 04:43:03 +02:00
parent 5168db69d9
commit 5c836c085d
2 changed files with 7 additions and 0 deletions
@@ -1,6 +1,9 @@
 # .git is sent so that `make build` in the Dockerfile can stamp the commit into
 # upaas. List no tracked file here: git would see it as deleted in the build and
 # the version would end in -dirty.
+# .git is sent without its config, because a remote URL there can carry a
+# credential; `git describe` does not need it.
+.git/config
 .env
 bin/
 .vscode/