Explorar o código

ci: add ignore-scripts to Node package manager config (20260527-153132)

Adds ignore-scripts=true (.npmrc) and enableScripts: false (.yarnrc.yml) to all Node.js Dockerfiles to prevent supply-chain attacks via postinstall scripts.
securityeng-bot[bot] hai 3 semanas
pai
achega
8ded149643

+ 1 - 0
angular/angular/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

+ 1 - 0
angular/angular/.yarnrc.yml

@@ -0,0 +1 @@
+enableScripts: false

+ 1 - 0
nginx-nodejs-redis/web/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

+ 1 - 0
nginx-nodejs-redis/web/.yarnrc.yml

@@ -0,0 +1 @@
+enableScripts: false

+ 1 - 0
react-express-mongodb/backend/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

+ 1 - 0
react-express-mongodb/backend/.yarnrc.yml

@@ -0,0 +1 @@
+enableScripts: false

+ 1 - 0
react-express-mongodb/frontend/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

+ 1 - 0
react-express-mongodb/frontend/.yarnrc.yml

@@ -0,0 +1 @@
+enableScripts: false

+ 1 - 0
react-express-mysql/backend/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

+ 1 - 0
react-express-mysql/backend/.yarnrc.yml

@@ -0,0 +1 @@
+enableScripts: false

+ 1 - 0
react-express-mysql/frontend/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

+ 1 - 0
react-express-mysql/frontend/.yarnrc.yml

@@ -0,0 +1 @@
+enableScripts: false

+ 1 - 0
react-java-mysql/frontend/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

+ 1 - 0
react-java-mysql/frontend/.yarnrc.yml

@@ -0,0 +1 @@
+enableScripts: false

+ 1 - 0
react-nginx/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

+ 1 - 0
react-nginx/.yarnrc.yml

@@ -0,0 +1 @@
+enableScripts: false

+ 1 - 0
react-rust-postgres/frontend/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

+ 1 - 0
react-rust-postgres/frontend/.yarnrc.yml

@@ -0,0 +1 @@
+enableScripts: false

+ 1 - 0
vuejs/vuejs/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

+ 1 - 0
vuejs/vuejs/.yarnrc.yml

@@ -0,0 +1 @@
+enableScripts: false