ci: enforce ignore-scripts policy for Node package managers

securityeng-bot[bot] · web-flow · commit e169d35f564b · 2026-05-27T15:31:10.000Z
diff --git a/Dockerfile b/Dockerfile
@@ -13,6 +13,7 @@ COPY app/src ./src
 
 # Run tests to validate app
 FROM app-base AS test
+COPY .yarnrc.yml .
 RUN yarn install
 RUN yarn test
 
