From 2ff679a320c5969078029efa1b4a7d1bc0725c9a Mon Sep 17 00:00:00 2001
From: Arya <arya.mohanan@ibm.com>
Date: Wed, 12 Aug 2026 10:30:09 +0530
Subject: [PATCH 1/2] chore(ci): use npm ci --ignore-scripts in Tekton install
 task

---
 .tekton/tasks/install-project-dependencies.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.tekton/tasks/install-project-dependencies.yaml b/.tekton/tasks/install-project-dependencies.yaml
index f26dc83d04..1400cb7c4a 100644
--- a/.tekton/tasks/install-project-dependencies.yaml
+++ b/.tekton/tasks/install-project-dependencies.yaml
@@ -49,7 +49,7 @@ spec:
           echo "Skipping npm cache..."
 
           echo "Installing npm dependencies..."
-          npm install --loglevel verbose --foreground-scripts
+          npm ci --loglevel verbose --ignore-scripts
         else
           echo "Restoring node_modules cache..."
           curl -fsSL https://clis.cloud.ibm.com/install/linux | sh
@@ -100,7 +100,7 @@ spec:
             echo "npm install: $npmInstall"
 
             if [ "$npmInstall" == true ]; then
-              npm install --loglevel verbose --foreground-scripts
+              npm ci --loglevel verbose --ignore-scripts
 
               rm -rf node-modules.tar.zst
               rm -rf node-modules.tar
@@ -146,13 +146,13 @@ spec:
               rm -rf node-modules.tar
 
               if [ "$npmInstall" == true ]; then
-                npm install --loglevel verbose --foreground-scripts
+                npm ci --loglevel verbose --ignore-scripts
               fi
 
               echo "Restored node_modules cache..."
             else
               echo "Download from main was not successful. Installing node_modules..."
-              npm install --loglevel verbose --foreground-scripts
+              npm ci --loglevel verbose --ignore-scripts
             fi
           fi
         fi

From 5ba5a9232f01194645f1eec9ee8bd5176bdd6f2a Mon Sep 17 00:00:00 2001
From: Arya <arya.mohanan@ibm.com>
Date: Wed, 12 Aug 2026 10:46:58 +0530
Subject: [PATCH 2/2] chore: updated

---
 bin/create-preinstalled-zip.sh     | 6 +++---
 bin/create-version-test-folders.js | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/bin/create-preinstalled-zip.sh b/bin/create-preinstalled-zip.sh
index 4a429f4d9e..7ff492628c 100755
--- a/bin/create-preinstalled-zip.sh
+++ b/bin/create-preinstalled-zip.sh
@@ -57,7 +57,7 @@ echo "Running: 'cd $TMPDIR/package'"
 cd "$TMPDIR/package"
 
 echo "Running: 'npm install --omit=optional --omit=dev' in $TMPDIR/package"
-npm install --omit=optional --omit=dev
+npm install --omit=optional --omit=dev --ignore-scripts
 
 CORE_TGZ="$TMPDIR/core.tgz"
 SHARED_TGZ="$TMPDIR/shared-metrics.tgz"
@@ -75,14 +75,14 @@ else
 fi
 
 if [ ${#INSTALL_ARGS[@]} -gt 0 ]; then
-  echo -n "Running: npm install --omit=optional --omit=dev ${INSTALL_ARGS[@]}"
+  echo -n "Running: npm install --omit=optional --omit=dev --ignore-scripts ${INSTALL_ARGS[@]}"
 
   for _p in "${INSTALL_ARGS[@]}"; do
     echo -n " $_p"
   done
   echo
 
-  npm install --omit=optional --omit=dev "${INSTALL_ARGS[@]}"
+  npm install --omit=optional --omit=dev --ignore-scripts "${INSTALL_ARGS[@]}"
 else
   echo "No additional tgz packages to install"
 fi
diff --git a/bin/create-version-test-folders.js b/bin/create-version-test-folders.js
index 8b8a58f466..81e59788da 100755
--- a/bin/create-version-test-folders.js
+++ b/bin/create-version-test-folders.js
@@ -245,8 +245,8 @@ ${
 }      log('[INFO] Running npm install for ${suiteName}@${displayVersion}...');
       const npmCmd = process.env.CI ?
         'npm install --cache ${rootDir}/.npm-offline-cache --prefer-offline ' +
-        '${hasLockFile ? '' : '--no-package-lock '}--no-audit --prefix ./ --no-progress' :
-        'npm install ${hasLockFile ? '' : '--no-package-lock '}--no-audit --prefix ./ --no-progress';
+        '${hasLockFile ? '' : '--no-package-lock '}--no-audit --ignore-scripts --prefix ./ --no-progress' :
+        'npm install ${hasLockFile ? '' : '--no-package-lock '}--no-audit --ignore-scripts --prefix ./ --no-progress';
 
       for (let attempt = 0; attempt < maxRetries; attempt++) {
         const timeout = 5 * 60 * 1000;