Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Specify ignore-scripts when publishing #47

Closed
jamietanna opened this issue Jan 7, 2022 · 0 comments · Fixed by #84
Closed

Specify ignore-scripts when publishing #47

jamietanna opened this issue Jan 7, 2022 · 0 comments · Fixed by #84
Labels
bug Something isn't working

Comments

@jamietanna
Copy link

jamietanna commented Jan 7, 2022 •
edited
Loading

As noted in https://snyk.io/blog/github-actions-to-securely-publish-npm-packages/, it is insecure to allow scripts to execute at the time of publishing, so we should make sure that this configuration is applied
@jamietanna jamietanna changed the title Specify ignore-scripts when publishin Specify ignore-scripts when publishing Jan 7, 2022
@mcous mcous added the bug Something isn't working label Apr 7, 2023
This was referenced Apr 8, 2023
Closed
Merged
mcous added a commit that referenced this issue Apr 20, 2023
@mcous
Rewrite internals for v2 release (#83)
c5f37b9 
Addresses #15, #35, #36, #47, #51, and #59
@mcous mcous mentioned this issue Apr 20, 2023
Merged
@mcous mcous closed this as completed in #84 Apr 20, 2023
@mondeja mondeja mentioned this issue Apr 30, 2023
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update to version 2 JS-DevTools/npm-publish
2 participants
@mcous @jamietanna