Don't install optional deps for docker build

digitalservicebund · Nov 29, 2024 · 70f7106 · 70f7106
1 parent 5fd0470
commit 70f7106
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -3,7 +3,9 @@ FROM node:20-alpine AS build-dependencies
 
 WORKDIR /src
 COPY package*.json ./
-RUN npm ci
+# TODO: Remove omits, when CVE-2024-21538 is fixed (https://scout.docker.com/vulnerabilities/id/CVE-2024-21538?s=github)
+# RUN npm ci
+RUN npm ci --omit=optional
 
 # Download and install the dependencies for running the app
 FROM node:20-alpine AS production-dependencies