use --ignore-scripts on cve build

finos · Dec 14, 2022 · 33d11d7 · 33d11d7
1 parent 0c5841b
commit 33d11d7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/cve-scanning-node.yml b/.github/workflows/cve-scanning-node.yml
@@ -22,5 +22,5 @@ jobs:
           node-version: ${{ matrix.node-version }}
       - run: npm config set package-lock false
       # TODO - this is ignoring package-lock.json
-      - run: npm install --prod
+      - run: npm install --prod --ignore-scripts
       - run: npx --yes auditjs ossi --whitelist allow-list.json