setup-node icon indicating copy to clipboard operation
setup-node copied to clipboard

ignore-scripts in npmrc

Open jksolbakken opened this issue 2 years ago • 0 comments

Description: Adds the ability to set the ignore-scripts param in the runners npmrc. This enables you to prevent pre/postinstall-scripts in npm packages from running as they are a potential security problem.

Check list:

  • [x] Mark if documentation changes are required.
  • [x] Mark if tests were added or updated to cover the changes.

jksolbakken avatar Feb 05 '24 18:02 jksolbakken