Security: Ignore scripts during CI and allow safe packages #480

New issue

Open

opened 2025-11-27 10:54:57 +00:00 by Vylpes · 0 comments

Vylpes commented

2025-11-27 10:54:57 +00:00

Owner

Due to recent security news we want to disable automatically running scripts
https://about.gitlab.com/blog/gitlab-discovers-widespread-npm-supply-chain-attack/
canvas currently requires scripts, so we will need to find a way around this, either by getting a new package or allowing this safely

- Due to recent security news we want to disable automatically running scripts - https://about.gitlab.com/blog/gitlab-discovers-widespread-npm-supply-chain-attack/ - `canvas` currently requires scripts, so we will need to find a way around this, either by getting a new package or allowing this safely