fix(security): harden image context and runtime receipts

2026-07-10 19:13:22 +08:00
parent d6aeb76c4b
commit 2bbb1e8e8b
12 changed files with 246 additions and 16 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -137,10 +137,12 @@ ehthumbs.db
 Desktop.ini

 # Docker
-.dockerignore
 docker-compose.override.yml
 .docker/

+# CD-generated governance receipts (deployed evidence, not source)
+governance/security_governance_source_receipt.json
+
 # SSL 憑證
 ssl/
 *.pem