Multi-stage build for backend

Multi-stage build for frontend

Non-root user in at least one Dockerfile

.dockerignore file(s) created

Environment variables not hardcoded in docker-compose

Health checks in docker-compose

depends_on with health condition

Persistent volume for PostgreSQL

Specific base image tags

Cache-efficient layer ordering

HEALTHCHECK in Dockerfile

.env.example or documentation of required env vars

Multi-stage build

Non-root user

.dockerignore file created

Cache-efficient layer ordering

HEALTHCHECK instruction

Specific base image tag

Alpine or slim base image

npm ci instead of npm install

NODE_ENV set to production

EXPOSE instruction present

WORKDIR set

Separate jobs or stages for lint, test, and deploy

Deploy depends on test passing

Dependency caching

Secrets not hardcoded

Deploy only on main branch

Lint and type-check as gates

Python version specified

Uses actions/checkout

Dependencies installed via requirements.txt

Correct trigger configuration