更新 Jenkinsfile
发布时屏蔽了 vab-contextmenu 这个包,原因是该包被检测到存在恶意行为(如窃取环境变量、删除文件等)。
This commit is contained in:
parent
fffbdce48e
commit
4fe6b28e81
8
Jenkinsfile
vendored
8
Jenkinsfile
vendored
@ -22,6 +22,14 @@ pipeline {
|
||||
sh '''
|
||||
rm -rf node_modules package-lock.json
|
||||
npm config set registry https://registry.npmmirror.com
|
||||
|
||||
# 检查并移除恶意依赖
|
||||
if grep -q "vab-contextmenu" package.json; then
|
||||
echo "发现恶意依赖vab-contextmenu,正在移除..."
|
||||
npm uninstall vab-contextmenu
|
||||
fi
|
||||
|
||||
# 安装其他依赖
|
||||
npm install
|
||||
'''
|
||||
}
|
||||
|
||||
Loading…
Reference in New Issue
Block a user