From a86d22850a9287c39dac329a04043261f159c79f Mon Sep 17 00:00:00 2001
From: Damien Regad <dregad@mantisbt.org>
Date: Sun, 18 Nov 2018 16:23:11 +0100
Subject: [PATCH] Run composer with '--no-plugins --no-scripts' options

Just to be on the safe side when running the script as root...
Reference: https://getcomposer.org/doc/faqs/how-to-install-untrusted-packages-safely.md
---
 update-trackers.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/update-trackers.sh b/update-trackers.sh
index b21be4e..aeea7b6 100755
--- a/update-trackers.sh
+++ b/update-trackers.sh
@@ -162,7 +162,7 @@ do
 
 	# Update Composer packages
 	echo "- Installing / Updating composer packages"
-	composer install
+	composer install --no-plugins --no-scripts
 
 	# Updating the version suffix in config file
 	echo "- Setting version_suffix to '$VERSION_SUFFIX' in $CONFIG_FILE"