fix: Omitting --ignore-scripts can lead to the execution of shell scr…

…ipts
SocialGouv · Jul 1, 2024 · c51cab2 · c51cab2
1 parent 5ef8c71
commit c51cab2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/back/strapi/Dockerfile b/back/strapi/Dockerfile
@@ -13,7 +13,7 @@ ARG NODE_HOME=/opt/$NODE_PACKAGE
 ENV NODE_PATH $NODE_HOME/lib/node_modules
 ENV PATH $NODE_HOME/bin:$PATH
 RUN curl https://nodejs.org/dist/v$NODE_VERSION/$NODE_PACKAGE.tar.gz | tar -xzC /opt/
-RUN npm i -g yarn
+RUN npm i -g --ignore-scripts yarn
 
 RUN apt-get update && \
   apt-get install --no-install-recommends -y \