Latte
1a039e32ab
Replace lint/test/docker workflows with ci.yml (gitleaks, lint, test-unit, test-integration, test-mcp, build-and-push, docs-check, security). Rebuild the Dockerfile as a digest-pinned multi-stage uv build running as uid 1000, add .dockerignore, a hardened compose file and a gitleaks config. The integration harness now falls back to /etc/hostname and /proc/self to find its own container.
5 lines
289 B
Plaintext
5 lines
289 B
Plaintext
# Advisories ignored by `scripts/ci/pip_audit.sh`.
|
|
# One vulnerability id per line (GHSA-..., PYSEC-..., CVE-...). '#' starts a comment.
|
|
# Every entry needs a justification and an expiry here and a matching waiver in
|
|
# docs/security.md. Keep this file empty unless a waiver is documented.
|