personal_interest_mirrors/awesome-compose
1
0 Fork 0
mirror of https://github.com/docker/awesome-compose.git synced 2026-11-15 19:41:12 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

ci: add ignore-scripts to Node package manager config (20260527-153132)
CodeQL / Analyze (go) (push) Failing after 31s
Details
CodeQL / Analyze (python) (push) Failing after 27s
Details
CodeQL / Analyze (typescript) (push) Failing after 27s
Details

Browse Source 
Adds ignore-scripts=true (.npmrc) and enableScripts: false (.yarnrc.yml) to all Node.js Dockerfiles to prevent supply-chain attacks via postinstall scripts.
This commit is contained in:
securityeng-bot[bot] authored and GitHub committed 2026-06-05 09:23:18 -04:00
1 parent 662dfc07d1
commit 8ded149643
20 files changed
+20
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

react-express-mysql/backend/.yarnrc.yml
+1
View File
@@ -0,0 +1 @@
enableScripts: false