fix(security): harden image context and runtime receipts
Some checks failed
CD Pipeline / deploy (push) Has been cancelled

This commit is contained in:
ogt
2026-07-10 19:13:22 +08:00
parent c839ac3eff
commit b2be34a923
12 changed files with 246 additions and 16 deletions

View File

@@ -65,6 +65,7 @@ services:
- ./gunicorn.conf.py:/app/gunicorn.conf.py:ro
- ./scheduler.py:/app/scheduler.py:ro
- ./scripts:/app/scripts:ro
- ./governance:/app/governance:ro
- ./migrations:/app/migrations:ro
- ./services:/app/services:ro
- ./routes:/app/routes:ro
@@ -217,6 +218,7 @@ services:
- ./scheduler.py:/app/scheduler.py:ro
- ./run_scheduler.py:/app/run_scheduler.py:ro
- ./scripts:/app/scripts:ro
- ./governance:/app/governance:ro
- ./services:/app/services:ro
- ./routes:/app/routes:ro
- ./database:/app/database:ro # 資料庫模型
@@ -285,6 +287,7 @@ services:
- ./config:/app/config
- ./config.py:/app/config.py:ro
- ./run_telegram_bot.py:/app/run_telegram_bot.py:ro
- ./governance:/app/governance:ro
- ./services:/app/services:ro
- ./routes:/app/routes:ro
- ./database:/app/database:ro