PERF103: No .dockerignore¶

Severity: low · Category: docker · Applies to: docker

Why it matters¶

Without .dockerignore the whole project, including .git, node_modules and .env, is sent to the build and can end up inside the image.

Add a .dockerignore listing .git, node_modules, .env and build output.

devshield fix can resolve this rule for the cases it can change safely. Preview it with devshield fix --dry-run --only PERF103.

Skip it everywhere in devshield.yml:

ignore:
  - PERF103

Or skip one line with a comment on that line or the line above:

devshield-ignore: PERF103