Skip to content

ci(bun): bun install 時に --ignore-scripts を追加しセキュリティ対策#604

Merged
blendthink merged 6 commits into
mainfrom
improve/#602
Oct 13, 2025
Merged

ci(bun): bun install 時に --ignore-scripts を追加しセキュリティ対策#604
blendthink merged 6 commits into
mainfrom
improve/#602

Conversation

@blendthink
Copy link
Copy Markdown
Contributor

概要

close #602

セキュリティ対策のため bun install 実行時に --ignore-scripts オプションを追加しました。

  • ローカルの tools/bootstrap.sh
  • CI(.github/workflows/wc-check-code-spell.yaml)

bun install 実行時に --ignore-scripts を付与しています。

詳細

  • サードパーティ依存の postinstall スクリプト等による意図しないコード実行を防止します。

変更ファイル

  • tools/bootstrap.sh
  • .github/workflows/wc-check-code-spell.yaml

@blendthink blendthink linked an issue Oct 8, 2025 that may be closed by this pull request
1 task
@yumemi-team-review-requester yumemi-team-review-requester Bot requested review from a team, BlueEventHorizon and hidekitux and removed request for a team October 8, 2025 10:57
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Oct 8, 2025

Ready for review 🚀

@blendthink blendthink merged commit 60683d0 into main Oct 13, 2025
18 checks passed
@blendthink blendthink deleted the improve/#602 branch October 13, 2025 23:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Improve]: bun install 時に --ignore-scripts をつける

2 participants