Skip to content

ci(bun): bun install 時に --ignore-scripts を追加しセキュリティ対策 #604

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
blendthink merged 6 commits into from
Oct 13, 2025
Merged

ci(bun): bun install 時に --ignore-scripts を追加しセキュリティ対策 #604

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
a028e2a
ci(bun): bun install 時に --ignore-scripts を追加しセキュリティ対策
blendthink Oct 8, 2025
db0e8aa
Initial plan
Copilot Oct 8, 2025
39fa824
Initial analysis: Found that most changes are already implemented
Copilot Oct 8, 2025
628059b
Merge pull request #603 from yumemi-inc/copilot/add-ignore-scripts-op…
blendthink Oct 8, 2025
03a4d39
fix(bootstrap): update bun install warning message to include --ignor…
blendthink Oct 8, 2025
75c9b62
fix(docs): update installation instructions to include --ignore-scrip…
blendthink Oct 8, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/initialization/TOOL_VERSION.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ labels: initialization

## `package.json` で管理する Node.js パッケージ

以下のツールは `package.json` の `devDependencies` でバージョンが指定され、`bun install` コマンドでインストールされます。(一部抜粋)
以下のツールは `package.json` の `devDependencies` でバージョンが指定され、`bun install --ignore-scripts` コマンドでインストールされます。(一部抜粋)

- **cspell (Spell Checker)**:
- 確認: `bun run cspell --version`
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/wc-check-code-spell.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:
install_args: "bun"

- name: Install dependencies
run: bun install --frozen-lockfile
run: bun install --frozen-lockfile --ignore-scripts

- name: Run spell check
run: bun run cspell lint
2 changes: 1 addition & 1 deletion docs/SPELL_CHECK.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,7 +83,7 @@ Pull Request 作成時などに GitHub Actions によって自動的にスペル
mise install

# パッケージのインストール
bun install
bun install --ignore-scripts
```

インストールが終わったら、以下のコマンドを実行してプロジェクト全体のスペルチェックを行います。
Expand Down
10 changes: 5 additions & 5 deletions tools/bootstrap.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -59,15 +59,15 @@ fi
##
##############################################################################
echo ""
print_step "bun install"
print_step "bun install --ignore-scripts"
if type bun >/dev/null 2>&1; then
if bun install; then
print_result 0 "bun install"
if bun install --ignore-scripts; then
print_result 0 "bun install --ignore-scripts"
else
print_result $? "bun install"
print_result $? "bun install --ignore-scripts"
fi
else
echo -e "${YELLOW}[!] bun install: Skip because it could not be found.${NC}"
echo -e "${YELLOW}[!] bun install --ignore-scripts: Skip because it could not be found.${NC}"
echo -e "${YELLOW}[!] This may be due to mise installation not completed.${NC}"
fi

Expand Down
Loading