Skip to content

Commit 22cbb9f

Browse files
yeelali14Linearb CI
andauthored
security: harden npm install against supply chain attacks (#513)
Co-authored-by: Linearb CI <linearb-ci@gmail.com>
1 parent 9552749 commit 22cbb9f

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

action.yml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -117,10 +117,14 @@ runs:
117117
shell: bash
118118
run: mv gitstream code
119119

120+
- name: Clear npm cache
121+
shell: bash
122+
run: npm cache clean --force
123+
120124
- name: Install Dependencies for plugins
121125
shell: bash
122126
continue-on-error: true
123-
run: npm i --silent moment@2.30.1 lodash@4.18.1 axios@1.14.0 @octokit/rest@20.1.1
127+
run: npm i --ignore-scripts moment@2.30.1 lodash@4.18.1 axios@1.14.0 @octokit/rest@20.1.1
124128

125129
- name: Run RulesEngine
126130
shell: bash

0 commit comments

Comments
 (0)