無駄実装の削除とパフォーマンス改善(waste audit 第2弾)

.github/workflows/docker-publish.yml

@@ -39,10 +39,10 @@ jobs:
         options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
@@ -76,7 +76,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -103,6 +103,8 @@ jobs:
         uses: docker/build-push-action@v5
         with:
           context: .
+          file: Dockerfile.django
+          load: ${{ github.event_name == 'pull_request' }}
           push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
@@ -112,7 +114,7 @@ jobs:
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:
-          image-ref: ${{ steps.meta.outputs.tags }}
+          image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:sha-${{ github.sha }}
           format: 'table'
           exit-code: '1'
           ignore-unfixed: true

AGENTS.md

@@ -21,26 +21,23 @@ techblog_cms is a Django-based technical blog content management system. It oper
 ## Project Structure
 ```
 techblog_cms/
-├── app/                          # Django application
-│   ├── techblog_cms/            # Main Django app
-│   │   ├── __init__.py
-│   │   ├── settings.py          # Django settings (using environment variables)
-│   │   ├── urls.py              # URL mapping
-│   │   ├── views.py             # View functions
-│   │   ├── wsgi.py              # WSGI entry point
-│   │   └── templates/           # HTML templates
-│   └── requirements.txt         # Python dependencies
+├── techblog_cms/                 # Django application
+│   ├── settings.py              # Django settings (using environment variables)
+│   ├── urls.py                  # URL mapping
+│   ├── views.py                 # View functions
+│   ├── wsgi.py                  # WSGI entry point
+│   ├── templates/               # HTML templates
+│   └── tests/                   # Test files
 ├── nginx/                        # Nginx configuration
-│   ├── conf.d/
-│   │   └── default.conf         # Nginx configuration file
-│   └── Dockerfile               # Nginx container definition
+│   └── conf.d/
+│       └── default.conf         # Nginx configuration file
 ├── scripts/                      # Utility scripts
 │   ├── init-letsencrypt.sh      # Initialize SSL certificate
 │   └── renew-cert.sh            # Renew SSL certificate
 ├── static/                       # Static files
-├── tests/                        # Test files
 ├── docker-compose.yml            # Container orchestration
-├── Dockerfile.*                  # Various Dockerfiles
+├── Dockerfile.django             # Django container definition
+├── Dockerfile.nginx              # Nginx container definition
 ├── requirements.txt              # Project-wide dependencies
 └── pytest.ini                    # pytest configuration
 ```

Dockerfile.django

@@ -34,6 +34,7 @@ ENV PYTHONUNBUFFERED=1
 
 # Copy requirements first for better caching
 COPY requirements.txt .
+RUN pip install --upgrade pip setuptools wheel
 RUN pip install -r requirements.txt
 
 # Copy project files

Dockerfile.nginx

@@ -7,10 +7,9 @@ RUN rm /etc/nginx/conf.d/default.conf
 # Copy configuration and static files
 COPY nginx/nginx.conf /etc/nginx/nginx.conf
 COPY nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf
-COPY static /var/www/static
 
 # Set proper permissions for static files
-RUN chown -R nginx:nginx /var/www/static
+RUN mkdir -p /var/www/static && chown -R nginx:nginx /var/www/static
 
 # Expose ports
 EXPOSE 80