From 48af7c9854adad63a6b78e3f817e0b08b509766c Mon Sep 17 00:00:00 2001 From: Sean McManus Date: Thu, 2 Apr 2026 10:15:04 -0700 Subject: [PATCH] Update npmrc. --- .github/actions/.npmrc | 4 +++- Extension/.npmrc | 4 +++- ExtensionPack/.npmrc | 4 +++- Themes/.npmrc | 4 +++- 4 files changed, 12 insertions(+), 4 deletions(-) diff --git a/.github/actions/.npmrc b/.github/actions/.npmrc index d8324806f..0446fca08 100644 --- a/.github/actions/.npmrc +++ b/.github/actions/.npmrc @@ -1,2 +1,4 @@ registry=https://pkgs.dev.azure.com/azure-public/VisualCpp/_packaging/cpp_PublicPackages/npm/registry/ -always-auth=true \ No newline at end of file +always-auth=true +# Disable postinstall scripts for supply chain security. Allowlist exceptions with npm trust: https://docs.npmjs.com/cli/v11/commands/npm-trust +ignore-scripts=true diff --git a/Extension/.npmrc b/Extension/.npmrc index d8324806f..0446fca08 100644 --- a/Extension/.npmrc +++ b/Extension/.npmrc @@ -1,2 +1,4 @@ registry=https://pkgs.dev.azure.com/azure-public/VisualCpp/_packaging/cpp_PublicPackages/npm/registry/ -always-auth=true \ No newline at end of file +always-auth=true +# Disable postinstall scripts for supply chain security. Allowlist exceptions with npm trust: https://docs.npmjs.com/cli/v11/commands/npm-trust +ignore-scripts=true diff --git a/ExtensionPack/.npmrc b/ExtensionPack/.npmrc index d8324806f..0446fca08 100644 --- a/ExtensionPack/.npmrc +++ b/ExtensionPack/.npmrc @@ -1,2 +1,4 @@ registry=https://pkgs.dev.azure.com/azure-public/VisualCpp/_packaging/cpp_PublicPackages/npm/registry/ -always-auth=true \ No newline at end of file +always-auth=true +# Disable postinstall scripts for supply chain security. Allowlist exceptions with npm trust: https://docs.npmjs.com/cli/v11/commands/npm-trust +ignore-scripts=true diff --git a/Themes/.npmrc b/Themes/.npmrc index d8324806f..0446fca08 100644 --- a/Themes/.npmrc +++ b/Themes/.npmrc @@ -1,2 +1,4 @@ registry=https://pkgs.dev.azure.com/azure-public/VisualCpp/_packaging/cpp_PublicPackages/npm/registry/ -always-auth=true \ No newline at end of file +always-auth=true +# Disable postinstall scripts for supply chain security. Allowlist exceptions with npm trust: https://docs.npmjs.com/cli/v11/commands/npm-trust +ignore-scripts=true