Skip to content

Conversation

@aramikm
Copy link
Collaborator

@aramikm aramikm commented Dec 3, 2025

Goal

The goal of this PR is to the install scripts are disabled

Closes #2644

@aramikm aramikm requested review from JoeCap08055, enddynayn and shannonwells and removed request for demisx and shannonwells December 3, 2025 00:17
cache-dependency-path: js/api-augment/package-lock.json
- name: Install
run: npm install # DO NOT use `npm ci` as we want the latest polkadot/api possible
run: npm install --ignore-scripts # DO NOT use `npm ci` as we want the latest polkadot/api possible
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

Copy link
Collaborator

@enddynayn enddynayn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 great!

@aramikm aramikm merged commit 4d11381 into main Dec 3, 2025
33 checks passed
@aramikm aramikm deleted the disable_install_scripts branch December 3, 2025 19:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Chore]: Disable all ci postinstall scripts to prevent supply chain attacks using this method

4 participants