Prevent `.pyc` files from the host from being included in Docker images (#10902)

This is:

1. A source of possible non-determinism (`.pyc` files may or may not be
   present depending on what the developer did before building the Docker
   image).

2. A potential data leak (a `.pyc` file contains the full path to the
   source file on the machine used to generated it).

I don't think this should affect release images, since our release
workflow does not run any Python scripts (so it doesn't generate `.pyc`
files to begin with).

This commit is contained in:

Roman Donchenko

2026-07-15 13:05:05 +03:00

committed by

GitHub

parent dfe523b420

commit ea15e72d15

1 changed files with 1 additions and 0 deletions

.dockerignore

View File

@@ -16,3 +16,4 @@
 /changelog.d
 /cvat-cli
 /profiles
 **/__pycache__

Prevent .pyc files from the host from being included in Docker images (#10902)

Prevent `.pyc` files from the host from being included in Docker images (#10902)