# R8 (security research §5.7): 05-release.sh and CI build from a clean
# `git archive`, where none of this exists. A `docker build .` from a
# working copy must not send secrets or local build output into the
# context (and from there into an image layer).
.git
**/node_modules
**/.next
**/.turbo
**/.env
**/.env.*
!**/.env.example
!**/.env-template
scripts/deploy/deploy.env
scripts/deploy/deploy.env.*
!scripts/deploy/deploy.env.example
.local-stack
