Skip to content

Commit 9edb1e7

Browse files
jespinoona-agent
andauthored
Disable npm lifecycle scripts and fix npx usage for security (#1037)
- Add --ignore-scripts flag to npm/yarn install in .gitpod.yml - Replace npx netlify-lambda with yarn netlify-lambda in package.json Related to PDE-128 Co-authored-by: Ona <no-reply@ona.com>
1 parent 4a9d595 commit 9edb1e7

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

.gitpod.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,8 @@ ports:
33
onOpen: open-preview
44

55
tasks:
6-
- init: cd plugins/gatsby-remark-gitpod && npm install
7-
- init: yarn --network-timeout 100000 && yarn build
6+
- init: cd plugins/gatsby-remark-gitpod && npm install --ignore-scripts
7+
- init: yarn --network-timeout 100000 --ignore-scripts && yarn build
88
command: yarn dev --host 0.0.0.0
99

1010
vscode:

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
],
99
"main": "n/a",
1010
"scripts": {
11-
"build": "cp -r src/docs/release-notes/* static/release-notes/ && gatsby build && npx netlify-lambda build src/functions",
11+
"build": "cp -r src/docs/release-notes/* static/release-notes/ && gatsby build && yarn netlify-lambda build src/functions",
1212
"clean": "rimraf public",
1313
"deploy": "gatsby build --prefix-paths && gh-pages -d public",
1414
"dev": "env-cmd -f .env.development gatsby develop",

0 commit comments

Comments
 (0)