github-starred/awesome-compose
2
0
Fork 0
mirror of https://github.com/docker/awesome-compose.git synced 2026-07-21 17:30:14 -05:00
Code Issues 9.5k Packages Projects Releases Wiki Activity

ci: add ignore-scripts to Node package manager config (20260527-153132)

Browse Source 
Adds ignore-scripts=true (.npmrc) and enableScripts: false (.yarnrc.yml) to all Node.js Dockerfiles to prevent supply-chain attacks via postinstall scripts.
This commit is contained in:
securityeng-bot[bot]
2026-06-05 09:23:18 -04:00
committed by GitHub
parent 662dfc07d1
commit 8ded149643
20 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
react-rust-postgres/frontend/.npmrc
+1
View File
@@ -0,0 +1 @@
ignore-scripts=true
react-rust-postgres/frontend/.yarnrc.yml
+1
View File
@@ -0,0 +1 @@
enableScripts: false