Skip to content

Commit

Permalink
ci(github): add --ignore-scripts to lerna publish - some are failing
Browse files Browse the repository at this point in the history
1. Longer term we'll just fix the scripts that are crashing, but right now
as a short term solution I disabled the script execution.
2. It might even be more secure for us to use this ignore scripts flag
permanently because some of the attack vectors are in those scripts which
new versions of the dependencies can execute arbitrary code.

Signed-off-by: Peter Somogyvari <peter.somogyvari@accenture.com>
  • Loading branch information
petermetz committed Jun 19, 2024
1 parent e47e19b commit 2c3bf5b
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/all-nodejs-packages-publish.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -40,4 +40,4 @@ jobs:
git config --global user.email "npm-ci@hyperledger.org"
git config --global user.name "hyperledger-ghci"
npm whoami
yarn lerna publish from-git --yes --loglevel=debug
yarn lerna publish from-git --yes --loglevel=debug --ignore-scripts

0 comments on commit 2c3bf5b

Please sign in to comment.