Skip to content

ci: add npmrc file for bkc#2435

Open
rsdmike wants to merge 1 commit intomainfrom
ciNpmInstall
Open

ci: add npmrc file for bkc#2435
rsdmike wants to merge 1 commit intomainfrom
ciNpmInstall

Conversation

@rsdmike
Copy link
Copy Markdown
Member

@rsdmike rsdmike commented Apr 13, 2026

PR Checklist

  • Unit Tests have been added for new changes
  • API tests have been updated if applicable
  • All commented code has been removed
  • If you've added a dependency, you've ensured license is compatible with Apache 2.0 and clearly outlined the added dependency.

What are you changing?

Anything the reviewer should know when reviewing this PR?

If the there are associated PRs in other repositories, please link them here (i.e. device-management-toolkit/repo#365 )

Copilot AI review requested due to automatic review settings April 13, 2026 21:40
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR introduces an .npmrc configuration intended to enforce stricter npm install behavior (likely for CI/security baseline compliance) and updates the Docker build to use it during dependency installation.

Changes:

  • Add a repository .npmrc with ignore-scripts, audit, and prefer-offline settings.
  • Update the Dockerfile to copy .npmrc into the build stage and switch npm ci to --ignore-scripts.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
Dockerfile Copies .npmrc into the builder stage and changes dependency install to npm ci --ignore-scripts.
.npmrc Adds npm configuration impacting installs (scripts/audit/cache behavior).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .npmrc
@rsdmike rsdmike enabled auto-merge (rebase) April 13, 2026 23:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants