Merge pull request #1546 from docker/sec-cli/ignore-scripts-fix-20260527-192735

ci: add ignore-scripts to Node package manager config (20260527-192735)
ci: enforce ignore-scripts policy for Node package managers
2026-05-28 08:58:18 +01:00 · 2026-05-28 09:51:59 +02:00 · 2026-05-27 20:02:21 +00:00
5 changed files with 148 additions and 147 deletions
--- a/.yarnrc.yml
+++ b/.yarnrc.yml
@@ -15,3 +15,4 @@ logFilters:
    level: discard

 nodeLinker: node-modules
+enableScripts: false
--- a/dist/index.cjs
+++ b/dist/index.cjs
--- a/dist/index.cjs.map
+++ b/dist/index.cjs.map
--- a/dist/licenses.txt
+++ b/dist/licenses.txt
@@ -4961,7 +4961,7 @@ THE SOFTWARE.

 The following npm package may be included in this product:

- - tmp@0.2.7
+ - tmp@0.2.5

 This package contains the following license:

--- a/yarn.lock
+++ b/yarn.lock
@@ -5682,9 +5682,9 @@ __metadata:
  linkType: hard

 "tmp@npm:^0.2.5":
-  version: 0.2.7
-  resolution: "tmp@npm:0.2.7"
-  checksum: 10/0a3bc90beb0c6275273c3475fb57e466eaab1c9c4a101d029ff62b18146ce136e7f75d09de34863d9f2c2a492751402508f9e028bc98eb34a1416195d4b15619
+  version: 0.2.5
+  resolution: "tmp@npm:0.2.5"
+  checksum: 10/dd4b78b32385eab4899d3ae296007b34482b035b6d73e1201c4a9aede40860e90997a1452c65a2d21aee73d53e93cd167d741c3db4015d90e63b6d568a93d7ec
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
CrazyMax	9c9a2860cb	Merge pull request #1546 from docker/sec-cli/ignore-scripts-fix-20260527-192735 ci: add ignore-scripts to Node package manager config (20260527-192735)	2026-05-28 09:51:59 +02:00
securityeng-bot[bot]	6d45611f19	ci: enforce ignore-scripts policy for Node package managers	2026-05-27 20:02:21 +00:00