deploy-stack 0.9.6 → 0.9.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/package.json +1 -1
  2. package/src/utils/generator.js +3 -0
  3. package/templates/docker/django.Dockerfile +4 -1
  4. package/templates/docker/python.Dockerfile +5 -1
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "deploy-stack",
3
- "version": "0.9.6",
3
+ "version": "0.9.7",
4
4
  "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
5
5
  "type": "module",
6
6
  "bin": {
package/src/utils/generator.js CHANGED
@@ -77,6 +77,9 @@ export async function generateTemplates(targetDir, config) {
77
77
  .git/
78
78
  .github/
79
79
  terraform/
80
+ **/.terraform/
81
+ **/.terraform.*
82
+ **/*.tfstate*
80
83
  .env
81
84
  README.md
82
85
  node_modules/
package/templates/docker/django.Dockerfile CHANGED
@@ -6,7 +6,10 @@ ENV PYTHONUNBUFFERED=1
6
6
 
7
7
  WORKDIR /app
8
8
 
9
- RUN apt-get update && apt-get install -y --no-install-recommends gcc libpq-dev && rm -rf /var/lib/apt/lists/*
9
+ # Upgrade Debian OS packages to patch system-level CVEs (like python3-setuptools)
10
+ RUN apt-get update && apt-get upgrade -y && \
11
+ apt-get install -y --no-install-recommends gcc libpq-dev && \
12
+ rm -rf /var/lib/apt/lists/*
10
13
 
11
14
  # Create unprivileged user
12
15
  RUN groupadd -g 1001 appgroup && \
package/templates/docker/python.Dockerfile CHANGED
@@ -6,10 +6,14 @@ ENV PYTHONUNBUFFERED=1
6
6
 
7
7
  WORKDIR /app
8
8
 
9
+ # Upgrade Debian OS packages to patch system-level CVEs (like python3-setuptools)
10
+ RUN apt-get update && apt-get upgrade -y && \
11
+ apt-get install -y --no-install-recommends gcc libpq-dev && \
12
+ rm -rf /var/lib/apt/lists/*
13
+
9
14
  # Create a non-root user for security compliance
10
15
  RUN adduser --disabled-password --gecos '' appuser
11
16
 
12
- # Install dependencies without caching to keep the image size small
13
17
  COPY requirements.txt .
14
18
 
15
19
  # Upgrade core pip tools to resolve base image CVEs