ci: enforce ignore-scripts policy for Node package managers

react-express-mysql/backend/Dockerfile

@@ -17,6 +17,8 @@ EXPOSE $PORT 9229 9230
 
 COPY package.json /code/package.json
 COPY package-lock.json /code/package-lock.json
+COPY .npmrc .
+COPY .yarnrc.yml .
 RUN npm ci
 
 # check every 30s to ensure this service returns HTTP 200