Files
certctl/.gitignore
T
shankar0123 9f14894868 chore: ignore cowork/ (operator scratch space)
Phase 0 closure prep: cowork/ holds the operator's internal
legal/audit/strategy artifacts — counsel-signed declaration, the
filter-repo callback for the history rewrite, the pre-rewrite bundle
backup, audit scratch HTML. These are private operator artifacts and
must never accidentally land in the public repo.

The public-facing description of the Phase 0 rewrite lives at
docs/history-normalization.md (separate commit, post-rewrite). This
gitignore entry is the pre-rewrite version so the rewrite's output
state has cowork/ ignored from commit 1.
2026-05-13 21:12:16 +00:00

105 lines
2.0 KiB
Plaintext

# Binaries for programs and plugins
*.exe
*.exe~
*.dll
*.so
*.so.*
*.dylib
bin/
# Frontend
web/node_modules/
web/dist/
# Test binary, built with `go test -c`
*.test
# Output of the go coverage tool
*.out
coverage.out
coverage.html
# Go workspace file
go.work
# Dependency directories
vendor/
# Environment variables
.env
.env.local
.env.*.local
# IDE
.idea/
.vscode/
*.swp
*.swo
*~
.DS_Store
*.iml
# Temporary files
tmp/
temp/
*.log
*.bak
# Private keys (agent-generated, never commit)
cmd/agent/*.key
cmd/agent/*.pem
# Database
*.db
*.sqlite3
# Allow migration SQL files (don't ignore *.sql globally)
# SQL files in migrations/ are tracked
# Build artifacts
certctl-server
certctl-agent
certctl-cli
/server
/agent
/cli
/mcp-server
# Private strategy docs
SECURITY_REMEDIATION.md
# OS
.DS_Store
Thumbs.db
# Local Go build/module caches (session-scoped, never committed)
/.gocache/
/.gomodcache/
/.gopath/
/.gomodcache-gopath/
# Design scratch files (session-scoped)
/.i004-design.md
/.i005-design.md
# HTTPS-Everywhere (M-007) Phase 6: the docker-compose.test.yml tls-init
# container writes ca.crt / server.crt / server.key into this directory so
# the host-side integration_test.go binary can pin the CA via
# CERTCTL_TEST_CA_BUNDLE=./certs/ca.crt. Material is regenerated on every
# `docker compose up` and never belongs in git.
/deploy/test/certs/
# Phase 1 RED-1 closure (2026-05-13): the f5-mock-icontrol Dockerfile
# rebuilds from source via multi-stage build (deploy/test/f5-mock-icontrol/
# Dockerfile line 13). The compiled ELF must not be tracked.
deploy/test/f5-mock-icontrol/f5-mock-icontrol
# Phase 0 closure (2026-05-13): cowork/ holds the operator's internal
# legal / audit / strategy artifacts (counsel-signed AI-authorship
# declaration, filter-repo callback, pre-rewrite bundle, audit HTML
# scratch). It is private operator scratch space and must never
# accidentally land in the public repo. See
# docs/history-normalization.md for the public-facing description of
# the Phase 0 git-history rewrite.
cowork/