stage18: docker hardening — non-root user, read-only FS, no-new-privileges, health-check fix, .dockerignore

This commit is contained in:
NSCT Agent
2026-08-28 16:22:23 +00:00
parent b23ff5a565
commit 60679083fa
8 changed files with 2802 additions and 3 deletions

7
.dockerignore Normal file
View File

@@ -0,0 +1,7 @@
# Build context
.git
*.md
tests/
.env
*.example
*.lock