ci: add ansible and CICD deployment

2026-06-23 07:15:42 +00:00
parent a6d74d9316
commit 6a49eb29c8
24 changed files with 1078 additions and 31 deletions
@@ -12,15 +12,19 @@ WORKDIR /app
 COPY requirements/base.txt requirements/base.txt
 COPY requirements/production.txt requirements/production.txt

-RUN pip install --no-cache-dir --upgrade pip wheel && \
+RUN pip install --no-cache-dir --upgrade pip setuptools wheel && \
    pip install --no-cache-dir -r requirements/production.txt

 FROM python:3.11-slim

-RUN apt-get update && apt-get install -y --no-install-recommends \
+RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
    libpq5 \
    && rm -rf /var/lib/apt/lists/*

+# Patch system-level wheel (CVE-2026-24049) + setuptools-vendored jaraco.context
+# (CVE-2026-23949) that Trivy flags in /usr/local site-packages.
+RUN pip install --no-cache-dir --upgrade pip setuptools wheel
+
 RUN groupadd --gid 1000 appgroup && \
    useradd --uid 1000 --gid appgroup --shell /bin/bash --create-home appuser