Merge pull request #297 from docker/sec-cli/ignore-scripts-fix-20260527-154450

ci: add ignore-scripts to Node package manager config (20260527-154450)

Author: vallieres

.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

functions/javascript-runner/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

functions/javascript-runner/Dockerfile

@@ -2,10 +2,12 @@
 FROM node:22-slim@sha256:377674fd5bb6fc2a5a1ec4e0462c4bfd4cee1c51f705bbf4bda0ec2c9a73af72 AS deps
 WORKDIR /app
 COPY package*.json ./
+COPY .npmrc .
 RUN --mount=type=cache,target=/root/.npm npm ci --omit=dev
 
 # The second stage - "build"
 FROM deps AS build
+COPY .npmrc .
 RUN --mount=type=cache,target=/root/.npm npm ci
 
 # The third stage, selecting a base image recommended by Scout

functions/node_intersector/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

functions/node_intersector/Dockerfile

@@ -6,6 +6,7 @@ WORKDIR /tree-sitter
 ENV PYTHONUNBUFFERED=1
 RUN apk add --update --no-cache python3 make gcc g++ && ln -sf python3 /usr/bin/python
 
+COPY .npmrc .
 RUN npm install tree-sitter tree-sitter-python tree-sitter-typescript tree-sitter-javascript
 
 

prompts/eslint/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

prompts/eslint/Dockerfile

@@ -7,6 +7,7 @@ ENTRYPOINT ["/lint.sh"]
 
 # Install node modules to /eslint
 WORKDIR /eslint7
+COPY .npmrc .
 RUN npm install --save eslint@7 typescript
 
 WORKDIR /eslint8

prompts/eslint/standardjs.Dockerfile

@@ -6,6 +6,7 @@ RUN apk add --no-cache bash fd jq
 ENTRYPOINT ["/lint-standardjs.sh"]
 
 # Install standard and ts-standard
+COPY .npmrc .
 RUN npm install -g standard ts-standard standard-json
 
 COPY scripts/lint-standardjs.sh /lint-standardjs.sh

prompts/telegram/.npmrc

@@ -0,0 +1 @@
+ignore-scripts=true

prompts/telegram/Dockerfile

@@ -1,4 +1,5 @@
 FROM node:20-alpine
 
 # Install node-telegram-bot-api
+COPY .npmrc .
 RUN npm i -g node-telegram-bot-api