build: add --ignore-scripts to frontend dockerfile npm install (secur…

…ity)
hotosm · Jul 30, 2024 · 717a217 · 717a217
1 parent 74b574a
commit 717a217
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/scripts/docker/Dockerfile.frontend b/scripts/docker/Dockerfile.frontend
@@ -5,7 +5,7 @@ COPY frontend .
 
 ## SETUP
 RUN git config --global url.https://github.com/.insteadOf [email protected]: \
-    && npm install
+    && npm install --ignore-scripts
 
 # SERVE
 COPY tasking-manager.env ..