feat: add env DO_NOT_NPM_INSTALL

Author: iseki0

env/common.go

@@ -26,6 +26,7 @@ var CliTlsAllowInsecure bool
 var DoNotBuild bool
 var WaitAfterScannerScan bool
 var StorageUploadSBom string
+var DoNotNpmInstall bool
 
 func init() {
 	ctm := os.Getenv("COMMAND_TIMEOUT")
@@ -43,6 +44,7 @@ func init() {
 	DoNotBuild2, _ := strconv.ParseBool(os.Getenv("MPS_DO_NOT_BUILD"))
 	DoNotBuild = DoNotBuild || DoNotBuild2
 	WaitAfterScannerScan, _ = strconv.ParseBool(os.Getenv("WAIT_AFTER_SCANNER_SCAN"))
+	DoNotNpmInstall, _ = strconv.ParseBool(os.Getenv("DO_NOT_NPM_INSTALL"))
 }
 
 func TlsAllowInsecure() bool {

module/npm/npm.go

@@ -148,7 +148,7 @@ func ScanNpmProject(ctx context.Context) ([]model.Module, error) {
 
 func doNpmInstallInDir(ctx context.Context, dir string) error {
 	logger := logctx.Use(ctx)
-	if env.DoNotBuild {
+	if env.DoNotBuild || env.DoNotNpmInstall {
 		logger.Warn("lockfile not found, and auto build is disabled, skip")
 		return autoBuildDisabled
 	}