Awesome Reviewers

When building container images, never copy the entire build context blindly. Add a .dockerignore (and/or use targeted COPY paths) to ensure sensitive files and local artifacts can’t be baked into the image—especially when using COPY . ..

Practical standard:

Example .dockerignore:

.env
.venv/
__pycache__/
*.pyc