Skip to content

ci: add ignore-scripts to Node package manager config (20260527-152929)#25182

Open
securityeng-bot[bot] wants to merge 1 commit into
mainfrom
sec-cli/ignore-scripts-fix-20260527-152929
Open

ci: add ignore-scripts to Node package manager config (20260527-152929)#25182
securityeng-bot[bot] wants to merge 1 commit into
mainfrom
sec-cli/ignore-scripts-fix-20260527-152929

Conversation

@securityeng-bot
Copy link
Copy Markdown

This PR was generated by sec-cli github repositories ignore-scripts update.

What changed

Package managers detected: npm, npx

Created config files:

  • .npmrc

Why

Running npm install (or yarn, pnpm, bun, npx) without restricting
postinstall scripts allows dependency lifecycle hooks to execute arbitrary code
during installation. Setting ignore-scripts=true (or the equivalent for your
package manager) mitigates this risk.

References:

@netlify
Copy link
Copy Markdown

netlify Bot commented May 27, 2026

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit 69b0087
🔍 Latest deploy log https://app.netlify.com/projects/docsdocker/deploys/6a170de1d81d650008f4f5f6
😎 Deploy Preview https://deploy-preview-25182--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants