ci: add ignore-scripts to Node package manager config (20260526-184008) (#748)

* ci: enforce ignore-scripts policy for Node package managers

---------

Co-authored-by: securityeng-bot[bot] <219863240+securityeng-bot[bot]@users.noreply.github.com>

react-express-mysql/backend/Dockerfile

@@ -17,6 +17,8 @@ EXPOSE $PORT 9229 9230
 
 COPY package.json /code/package.json
 COPY package-lock.json /code/package-lock.json
+COPY .npmrc .
+COPY .yarnrc.yml .
 RUN npm ci
 
 # check every 30s to ensure this service returns HTTP 200

react-express-mysql/frontend/Dockerfile

@@ -8,6 +8,8 @@ ENV PORT=3000
 WORKDIR /code
 COPY package.json /code/package.json
 COPY package-lock.json /code/package-lock.json
+COPY .npmrc .
+COPY .yarnrc.yml .
 RUN npm ci
 COPY . /code