Skip to content

Commit 37ecc85

Browse files
jespinoona-agent
andcommitted
Disable npm lifecycle scripts for security
Add --ignore-scripts flag to pnpm install to prevent execution of potentially malicious scripts during package installation. Related to PDE-128 Co-authored-by: Ona <no-reply@ona.com>
1 parent 6032d47 commit 37ecc85

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.gitpod.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
tasks:
2-
- command: npm install pnpm -g && pnpm install
2+
- command: npm install pnpm -g && pnpm install --ignore-scripts
33

44
github:
55
prebuilds:

0 commit comments

Comments
 (0)