Skip to main content
Share Your Experience: Take the 2024 Developer Survey
8 votes
Accepted

Does `npm audit` add any value when using `dependabot`

Dependabot and npm audit both poll the Node Security Working Group database for Node-based projects. However, Dependabot has the added ability to check dependencies in numerous other types of projects ...
Adam's user avatar
  • 196
7 votes
Accepted

How to enable the npm cache in a Jenkins build slave that runs in docker?

I finally solved this by using Docker image layer caching for the npm install, following this answer This means I moved the npm install out of the Docker slave image and into the actually frontend ...
Brian Ogden's user avatar
4 votes
Accepted

When to "npm publish" when using git flow

I'd set up my CI system to do this on every commit to master, that is, after the release branch merges. The first very straightforward reason for this is that the commit to master gets tagged with ...
David Maze's user avatar
4 votes

Force script to fail if "npm install" has network issues

Try piping your output to grep and then failing based off of the return code of grep: npm install 2>&1 | grep "Error: connect ETIMEDOUT" Per the grep documentation, the exit status is 0 if ...
James Shewey's user avatar
  • 3,734
3 votes

Does `npm audit` add any value when using `dependabot`

As per October 2021: GitHub Advisory Database now powers npm audit : "This means that every version of the npm CLI that supports security audits is now talking directly to the GitHub Advisory ...
Alexandre Andrade's user avatar
3 votes
Accepted

npm not found but installed from the shell script file in Dockerfile

The issue is that prereqs-ubuntu.sh uses bash to install the npm. While the RUN directive uses sh to run the commands. Where is the npm installed root@2cd4a6af90f4:/app# type npm npm is /root/.nvm/...
Yuri G.'s user avatar
  • 179
2 votes

Best practise/standard practise for semantic versioning in development

Version bumps should happen every single build. Waiting until a formal release and releasing everything as 1.0.0 is an option, but you should still know what build you are using in your alpha/beta. ...
Wesley Rolnick's user avatar
2 votes

How can container user and host user both have access to same files in volume?

I was tripping myself up: when I was trying the --user flag, I still had --userns-remap set. Running the daemon without --userns-remap did the trick.
aryzing's user avatar
  • 131
1 vote

Dockerhub says Hello World causes CVE-2023-5363 and CVE-2023-5678

CVS-2023-5363 and CVE-2023-5678 are both vulnerabilities in OpenSSL. They don't come from any of the code that you wrote. Your base image - node:21-alpine - probably has a vulnerable version of ...
Thomas Owens's user avatar
1 vote

How to upload a file as user input in Github Actions workflow?

It would be easier to store secrets in either secrets or specific environments in the repo: Secrets: https://github.com/**account_name**/**repo_name**/settings/secrets/actions Environments: https://...
Terry Bonds's user avatar
1 vote
Accepted

RUN fails while installing Angular on Ubuntu Image

Finally managed to generate the docker image for Angular. Here are is the screnshot. I am listing the contents of the Docker File along with the comments that explain the reasoning and my learnings. #...
sridhar pandurangiah's user avatar
1 vote

Issue installing NPM packages on Jenkins

There are likely a multitude of issues that could be the root cause, as a starter for ten I would look at the following: Is the ownership and permissions on the node_modules directory correct, i.e. ...
Richard Slater's user avatar
1 vote

How to deploy a ZIP or WAR equivalent (built locally via npm)?

Welcome to devops.stackexchange.com. What works best is dependent upon the team. Find a good tool for the team and perhaps change that when the circumstances change. Also you might do a little ...
simbo1905's user avatar
  • 1,172
1 vote

How to deploy a ZIP or WAR equivalent (built locally via npm)?

There are now two possible solutions: One NPM only one, and a clean one. First the NPM One (where im not quite sure what exactly will work): I just googled "npm deployment" and found 3 different ...
Serverfrog's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible