schalli
3d00be8292
- Skript .gitea/scripts/security-scan.sh: gitleaks, pnpm audit, osv-scanner, Semgrep, Trivy (Quellstand und Abbilder), angepinnt und per SHA256 geprueft, Exit immer 0 - Job security nach publish (nur main und Tags v*, continue-on-error, Zeitlimit 30 Minuten, kein Secret) - Ausnahmelisten .gitleaks.toml und .semgrepignore fuer geprueft harmlose Treffer - docs/ci-cd-setup.md beschreibt den Job Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
52 lines
787 B
Plaintext
52 lines
787 B
Plaintext
# Dependencies
|
|
node_modules/
|
|
|
|
# Build outputs
|
|
.next/
|
|
dist/
|
|
*.tsbuildinfo
|
|
|
|
# Rust / Cargo
|
|
target/
|
|
|
|
# Turborepo
|
|
.turbo/
|
|
|
|
# Environment variables
|
|
.env
|
|
|
|
# Logs
|
|
*.log
|
|
|
|
# macOS
|
|
.DS_Store
|
|
|
|
# Test coverage
|
|
coverage/
|
|
|
|
# pnpm store
|
|
.pnpm-store/
|
|
|
|
# User-provided files (not tracked)
|
|
.planning/user-files/
|
|
user-files/
|
|
|
|
# Playwright MCP test artifacts
|
|
.playwright-mcp/
|
|
|
|
# GSD research cache
|
|
.planning/research/.cache/
|
|
|
|
# GSD runtime scratch (Dispatch-Sentinel, pro Sitzung neu geschrieben)
|
|
.gsd/
|
|
|
|
# Desktop-Pakete aus dem Bau (Phase 18)
|
|
desktop-dist/*
|
|
!desktop-dist/.gitkeep
|
|
|
|
# Privater Updater-Signierschluessel liegt ausserhalb des Repos (~/.tessera/desktop-updater/) -- nie einchecken
|
|
*.key
|
|
|
|
# Berichte der Sicherheitspruefung (quick-261009-p0m, .gitea/scripts/security-scan.sh)
|
|
security-reports/
|