ci: add ignore-scripts to Node package manager config (20260527-153132)
CodeQL / Analyze (go) (push) Failing after 31s
CodeQL / Analyze (python) (push) Failing after 27s
CodeQL / Analyze (typescript) (push) Failing after 27s

Adds ignore-scripts=true (.npmrc) and enableScripts: false (.yarnrc.yml) to all Node.js Dockerfiles to prevent supply-chain attacks via postinstall scripts.
This commit is contained in:
securityeng-bot[bot]
2026-06-05 09:23:18 -04:00
committed by GitHub
parent 662dfc07d1
commit 8ded149643
20 changed files with 20 additions and 0 deletions
+1
View File
@@ -0,0 +1 @@
ignore-scripts=true
+1
View File
@@ -0,0 +1 @@
enableScripts: false
+1
View File
@@ -0,0 +1 @@
ignore-scripts=true
+1
View File
@@ -0,0 +1 @@
enableScripts: false
+1
View File
@@ -0,0 +1 @@
ignore-scripts=true
@@ -0,0 +1 @@
enableScripts: false
+1
View File
@@ -0,0 +1 @@
ignore-scripts=true
@@ -0,0 +1 @@
enableScripts: false
+1
View File
@@ -0,0 +1 @@
ignore-scripts=true
+1
View File
@@ -0,0 +1 @@
enableScripts: false
+1
View File
@@ -0,0 +1 @@
ignore-scripts=true
+1
View File
@@ -0,0 +1 @@
enableScripts: false
+1
View File
@@ -0,0 +1 @@
ignore-scripts=true
+1
View File
@@ -0,0 +1 @@
enableScripts: false
+1
View File
@@ -0,0 +1 @@
ignore-scripts=true
+1
View File
@@ -0,0 +1 @@
enableScripts: false
+1
View File
@@ -0,0 +1 @@
ignore-scripts=true
+1
View File
@@ -0,0 +1 @@
enableScripts: false
+1
View File
@@ -0,0 +1 @@
ignore-scripts=true
+1
View File
@@ -0,0 +1 @@
enableScripts: false