Skip to content

Commit 8a01f5f

Browse files
author
Gonzalo Diaz
committed
[BUGFIX] sonarcloud Security Hotspots: Omitting "--ignore-scripts" can lead to the execution of shell scripts. Make sure it is safe here.
Allowing shell scripts execution during package installation is security-sensitive githubactions:S6505
1 parent a32cd40 commit 8a01f5f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/prettier-json.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323

2424
- name: Install Prettier
2525
run: |
26-
npm install -g prettier@3.5.3
26+
npm install -g --ignore-scripts prettier@3.7.4
2727
2828
- name: Prettier LINT / Style JSON
2929
run: >

0 commit comments

Comments
 (0)