chore(ci): npm ci --ignore-scripts

[DerekRoberts]

Re: Shai Hulud 2
Fix: via @basilv

---

Thanks for the PR!

Deployments, as required, will be available below:

• api
• admin
• public

Please create PRs in draft mode. Mark as ready to enable:

• Analysis Workflow

After merge, new images are deployed in:

• Merge Workflow

[Copilot]

Pull request overview

This PR implements a security mitigation against the Shai Hulud 2 npm supply chain attack by adding the --ignore-scripts flag to npm ci commands across build environments. This prevents potentially malicious install scripts from executing during package installation.

Key Changes

• Added --ignore-scripts flag to npm ci commands in Dockerfiles for api, admin, and public services
• Updated one npm ci command in docker-compose.yml admin service with --ignore-scripts
• Minor formatting improvements in docker-compose.yml (quote style, indentation)

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
public/Dockerfile	Added --ignore-scripts to both npm ci commands in the build stage
api/Dockerfile	Added --ignore-scripts to both npm ci commands in the build stage
admin/Dockerfile	Added --ignore-scripts to both npm ci commands in the build stage
docker-compose.yml	Partially applied --ignore-scripts to admin service, plus formatting improvements

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated no new comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[ianliuwk1019]

Thanks Derek.