deploy-stack 0.9.7 → 0.9.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/package.json +1 -1
  2. package/src/utils/generator.js +6 -6
  3. package/templates/docker/django.Dockerfile +6 -2
  4. package/templates/docker/python.Dockerfile +4 -2
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "deploy-stack",
3
- "version": "0.9.7",
3
+ "version": "0.9.9",
4
4
  "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
5
5
  "type": "module",
6
6
  "bin": {
package/src/utils/generator.js CHANGED
@@ -65,7 +65,7 @@ export async function generateTemplates(targetDir, config) {
65
65
  } else {
66
66
  const existingGitignore = await fs.readFile(targetGitignore, 'utf-8');
67
67
  if (!existingGitignore.includes('terraform/.terraform/')) {
68
- const appendIgnore = '\n# Added by deploy-stack (Terraform)\n.terraform/*\n*.tfstate\n*.tfstate.backup\n.terraform.lock.hcl\nsecret_keys.json\n.env\n';
68
+ const appendIgnore = '\n# Added by deploy-stack (Terraform)\nterraform/.terraform/\nterraform/*.tfstate\nterraform/*.tfstate.backup\nterraform/.terraform.lock.hcl\nterraform/secret_keys.json\n.env\n';
69
69
  await fs.appendFile(targetGitignore, appendIgnore);
70
70
  }
71
71
  }
@@ -95,11 +95,11 @@ __pycache__/
95
95
  function getGitignoreContent(framework) {
96
96
  const baseIgnore = `
97
97
  # Infrastructure (deploy-stack)
98
- .terraform/*
99
- *.tfstate
100
- *.tfstate.backup
101
- .terraform.lock.hcl
102
- secret_keys.json
98
+ terraform/.terraform/
99
+ terraform/*.tfstate
100
+ terraform/*.tfstate.backup
101
+ terraform/.terraform.lock.hcl
102
+ terraform/secret_keys.json
103
103
  .env
104
104
 
105
105
  # OS
package/templates/docker/django.Dockerfile CHANGED
@@ -17,8 +17,12 @@ RUN groupadd -g 1001 appgroup && \
17
17
 
18
18
  COPY requirements.txt .
19
19
 
20
- # Patch core python packaging tools to resolve CVEs
21
- RUN pip install --upgrade pip setuptools wheel
20
+ # Upgrade core pip tools and purge downloaded caches to resolve ghost CVEs
21
+ RUN pip install --no-cache-dir --upgrade pip setuptools wheel && \
22
+ rm -rf /root/.cache/pip && \
23
+ rm -rf /usr/local/lib/python3.12/ensurepip/_bundled
24
+
25
+ # Install dependencies without caching to keep the image size small
22
26
  RUN pip install --no-cache-dir -r requirements.txt gunicorn
23
27
 
24
28
  # Copy code with explicit ownership
package/templates/docker/python.Dockerfile CHANGED
@@ -16,8 +16,10 @@ RUN adduser --disabled-password --gecos '' appuser
16
16
 
17
17
  COPY requirements.txt .
18
18
 
19
- # Upgrade core pip tools to resolve base image CVEs
20
- RUN pip install --upgrade pip setuptools wheel
19
+ # Upgrade core pip tools and purge downloaded caches to resolve ghost CVEs
20
+ RUN pip install --no-cache-dir --upgrade pip setuptools wheel && \
21
+ rm -rf /root/.cache/pip && \
22
+ rm -rf /usr/local/lib/python3.12/ensurepip/_bundled
21
23
 
22
24
  # Install dependencies without caching to keep the image size small
23
25
  RUN pip install --no-cache-dir -r requirements.txt