ci: add ignore-scripts to Node package manager config (20260526-184008) (#748)

* ci: enforce ignore-scripts policy for Node package managers

---------

Co-authored-by: securityeng-bot[bot] <219863240+securityeng-bot[bot]@users.noreply.github.com>

react-express-mongodb/backend/Dockerfile

@@ -7,6 +7,8 @@ WORKDIR /usr/src/app
 
 COPY package.json /usr/src/app/package.json
 COPY package-lock.json /usr/src/app/package-lock.json
+COPY .npmrc .
+COPY .yarnrc.yml .
 RUN npm ci
 
 COPY . /usr/src/app

react-express-mongodb/frontend/Dockerfile

@@ -14,6 +14,8 @@ COPY package-lock.json /usr/src/app
 #RUN npm set progress=false \
 #    && npm config set depth 0 \
 #    && npm i install
+COPY .npmrc .
+COPY .yarnrc.yml .
 RUN npm ci
 
 # Get all the code needed to run the app