From 42c5f5efea43fb1ec3175ec162b66e89f8eeb8fc Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes@localhost>
Date: Thu, 15 Oct 2026 20:31:23 +0000
Subject: [PATCH] dockerignore: exclude local analysis scratch from the build
 context

Defence in depth. The Dockerfile only COPYs explicit paths (vendor/, docker/,
scripts/setup-ida-mcp.sh, assets/), so nothing else in the working tree can
reach an image - but if a future COPY widens, ctf/ and targets/ must not be
sweepable.
---
 .dockerignore | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.dockerignore b/.dockerignore
index ce909fe..7e0f05a 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -13,6 +13,7 @@ vendor/hopper-state/*
 !vendor/.gitkeep
 work/
 targets/
+ctf/
 config/ida/*.hexlic
 config/ida-mcp.json
 config/rea.env