adds the ability to set ignore-scripts in npm config

This commit is contained in:
J-K. Solbakken 2024-02-05 19:38:46 +01:00
parent e54c83ad43
commit 8d3d0041fe
No known key found for this signature in database
8 changed files with 122 additions and 3 deletions

View file

@ -25,6 +25,9 @@ inputs:
description: 'Used to specify a package manager for caching in the default directory. Supported values: npm, yarn, pnpm.'
cache-dependency-path:
description: 'Used to specify the path to a dependency file: package-lock.json, yarn.lock, etc. Supports wildcards or a list of file names for caching multiple dependencies.'
ignore-scripts:
description: 'Set ignore-scripts in npmrc to prevent pre and postinstall scripts from running as they are a potential security problem.'
default: 'false'
# TODO: add input to control forcing to pull from cloud or dist.
# escape valve for someone having issues or needing the absolute latest which isn't cached yet
outputs: