-
Notifications
You must be signed in to change notification settings - Fork 1.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Disable scripts #959
Labels
feature request
New feature or request to improve the current logic
Comments
jksolbakken
added
feature request
New feature or request to improve the current logic
needs triage
labels
Feb 13, 2024
Hello @jksolbakken, Thank you for creating this feature request and we will get back to you once we have some feedback :) |
Some example uses as https://github.com/actions/setup-node/blob/main/docs/advanced-usage.md#use-private-packages give good reasoning why, but most importantly it also shows how to run the postinstalls via rebuild in a next step without the secrets. I like that approach a lot. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description:
It would be nice to be able to configure npm to ignore pre and postinstall scripts.
Justification:
Pre/postinstall scripts are a potential security problem.
Are you willing to submit a PR?
Yes, see #955
The text was updated successfully, but these errors were encountered: