Skip to content

Navigation Menu

Sign in
Sign up

fix(security): run npm ci with --ignore-scripts - #348

Open
jcchavezs wants to merge 1 commit into
auth0:master from
jcchavezs:ci_ignore_scripts
Open

fix(security): run npm ci with --ignore-scripts #348
jcchavezs wants to merge 1 commit into
auth0:master from
jcchavezs:ci_ignore_scripts

Conversation

@jcchavezs

@jcchavezs jcchavezs commented Apr 9, 2026

Copy link
Copy Markdown

This would avoid malicious scripts in vulnerable packages to be executed on CI

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

AltStyle によって変換されたページ (->オリジナル) /