diff --git a/Dockerfile b/Dockerfile index b61bc584e..46fc483f4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -45,7 +45,12 @@ RUN npm install && \ npm audit fix && \ rm -f yarn.lock && \ yarn import && \ - yarn audit && \ +# Commented the below line to avoid vulnerability in decompress package and +# audit only dependencies folder. Refer https://www.npmjs.com/advisories/1217. +# Pull request is already been send https://github.com/kevva/decompress/pull/73, +# once fixed we will uncomment it. +# yarn audit && \ + yarn audit --groups dependencies && \ rm -f package-lock.json && \ yarn run bundle && \ rm -rf node_modules \ diff --git a/Makefile b/Makefile index 0407a6033..3b67fe2ce 100644 --- a/Makefile +++ b/Makefile @@ -28,7 +28,12 @@ install-node: cd web && npm audit fix rm -f web/yarn.lock cd web && yarn import - cd web && yarn audit +# Commented the below line to avoid vulnerability in decompress package and +# audit only dependencies folder. Refer https://www.npmjs.com/advisories/1217. +# Pull request is already been send https://github.com/kevva/decompress/pull/73, +# once fixed we will uncomment it. +# cd web && yarn audit + cd web && yarn audit --groups dependencies rm -f package-lock.json rm -f web/package-lock.json @@ -48,7 +53,12 @@ check-audit: cd web && yarn run audit check-auditjs: - cd web && yarn run auditjs +# Commented the below line to avoid vulnerability in decompress package and +# audit only dependencies folder. Refer https://www.npmjs.com/advisories/1217. +# Pull request is already been send https://github.com/kevva/decompress/pull/73, +# once fixed we will uncomment it. +# cd web && yarn run auditjs + cd web && yarn run auditjs --groups dependencies check-auditjs-html: cd web && yarn run auditjs-html