inventree/InvenTree
2
0
Fork 0
mirror of https://github.com/inventree/InvenTree.git synced 2025-06-14 11:05:41 +00:00
Code Activity

fix: ci security issues (#9451)

Browse Source 
* fix possible code injection errors

* pin n
This commit is contained in:
Matthias Mair
2025-04-04 00:04:06 +02:00
committed by GitHub
parent a2370dbe59
commit 2712f30382
3 changed files with 10 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
contrib/container/Dockerfile
View File

@ -108,7 +108,7 @@ RUN ./install_build_packages.sh --no-cache --virtual .build-deps && \
FROM prebuild AS frontend
RUN apk add --no-cache --update nodejs npm yarn bash
RUN npm install -g --ignore-scripts n
RUN npm install -g --ignore-scripts n@10.1.0
RUN bash -c "n lts"
RUN yarn config set network-timeout 600000 -g
COPY src ${INVENTREE_HOME}/src
@ -152,7 +152,7 @@ RUN pip install --require-hashes -r base_requirements.txt --no-cache
# Install nodejs / npm / yarn
RUN apk add --no-cache --update nodejs npm yarn bash
RUN npm install -g --ignore-scripts n
RUN npm install -g --ignore-scripts n@10.1.0
RUN bash -c "n lts"
RUN yarn config set network-timeout 600000 -g