Use latest npm version (#1276)

* Use latest npm * Build * WORKDIR / * trivy
oxsecurity · Feb 20, 2022 · cebe7f9 · cebe7f9
1 parent bbac3d1
commit cebe7f9
Show file tree

Hide file tree

Showing 18 changed files with 44 additions and 48 deletions.
diff --git a/.trivyignore b/.trivyignore
@@ -5,6 +5,7 @@ CVE-2020-14040
 CVE-2020-14343
 CVE-2020-16250
 CVE-2020-28469
+CVE-2020-28477
 CVE-2020-29529
 CVE-2020-29529
 CVE-2020-29651
@@ -15,13 +16,20 @@ CVE-2020-7219
 CVE-2020-8558
 CVE-2020-9283
 CVE-2021-22569
+CVE-2021-23337
+CVE-2021-23358
+CVE-2021-23406
+CVE-2021-23436
+CVE-2021-23807
 CVE-2021-25741
+CVE-2021-28918
 CVE-2021-29482
 CVE-2021-3121
 CVE-2021-32803
 CVE-2021-32804
 CVE-2021-32923
 CVE-2021-33503
+CVE-2021-3538
 CVE-2021-35515
 CVE-2021-35516
 CVE-2021-35517
@@ -31,6 +39,7 @@ CVE-2021-36222
 CVE-2021-3711
 CVE-2021-3712
 CVE-2021-37219
+CVE-2021-3757
 CVE-2021-37701
 CVE-2021-37712
 CVE-2021-37713

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 Note: Can be used with `megalinter/megalinter@beta` in your GitHub Action mega-linter.yml file, or with `megalinter/megalinter:beta` docker image
 
+- Fixes
+  - Use latest version of npm
+
 - Linter versions upgrades
   - [cpplint](https://github.com/cpplint/cpplint) from 1.5.5 to **1.6.0** on 2022-02-20
 <!-- linter-versions-end -->

diff --git a/Dockerfile b/Dockerfile
@@ -45,6 +45,8 @@ ARG PSSA_VERSION='latest'
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -160,9 +162,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/ci_light/Dockerfile b/flavors/ci_light/Dockerfile
@@ -30,6 +30,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -93,9 +95,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/dart/Dockerfile b/flavors/dart/Dockerfile
@@ -33,6 +33,8 @@ ARG GLIBC_VERSION='2.31-r0'
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -99,9 +101,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/documentation/Dockerfile b/flavors/documentation/Dockerfile
@@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -98,9 +100,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/dotnet/Dockerfile b/flavors/dotnet/Dockerfile
@@ -37,6 +37,8 @@ ARG PSSA_VERSION='latest'
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -107,9 +109,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/go/Dockerfile b/flavors/go/Dockerfile
@@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -99,9 +101,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/java/Dockerfile b/flavors/java/Dockerfile
@@ -33,6 +33,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -100,9 +102,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/javascript/Dockerfile b/flavors/javascript/Dockerfile
@@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -98,9 +100,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/php/Dockerfile b/flavors/php/Dockerfile
@@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -119,9 +121,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/python/Dockerfile b/flavors/python/Dockerfile
@@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -108,9 +110,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/ruby/Dockerfile b/flavors/ruby/Dockerfile
@@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -102,9 +104,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/rust/Dockerfile b/flavors/rust/Dockerfile
@@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -98,9 +100,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/salesforce/Dockerfile b/flavors/salesforce/Dockerfile
@@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -99,9 +101,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/scala/Dockerfile b/flavors/scala/Dockerfile
@@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -98,9 +100,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/swift/Dockerfile b/flavors/swift/Dockerfile
@@ -32,6 +32,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -100,9 +102,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \

diff --git a/flavors/terraform/Dockerfile b/flavors/terraform/Dockerfile
@@ -36,6 +36,8 @@ FROM python:3.9.7-alpine3.13
 # Run APK installs #
 ####################
 
+WORKDIR /
+
 # APK Packages used by mega-linter core architecture
 RUN apk add --update --no-cache \
     bash \
@@ -102,9 +104,6 @@ RUN pip3 install --no-cache-dir --upgrade pip && pip3 install --no-cache-dir --u
 #############################################################################################
 
 # Downgrade npm because from npm@v7, npm install crashes when called from root directory within Dockerfile
-RUN npm install npm@latest-6 -g
-# Disable package-lock.json to avoid sudden crash. Try to remove later if possible
-RUN echo 'package-lock=false' >> .npmrc 
 ENV NODE_OPTIONS="--max-old-space-size=8192"
 #NPM__START
 RUN npm install --no-cache --ignore-scripts \