From 37ecc85315e206013e01eef7e6744ef376904b89 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jes=C3=BAs=20Espino?= Date: Thu, 4 Dec 2025 19:08:50 +0000 Subject: [PATCH] Disable npm lifecycle scripts for security Add --ignore-scripts flag to pnpm install to prevent execution of potentially malicious scripts during package installation. Related to PDE-128 Co-authored-by: Ona --- .gitpod.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitpod.yml b/.gitpod.yml index cd0644e..30a0b16 100644 --- a/.gitpod.yml +++ b/.gitpod.yml @@ -1,5 +1,5 @@ tasks: - - command: npm install pnpm -g && pnpm install + - command: npm install pnpm -g && pnpm install --ignore-scripts github: prebuilds: