chore: remove unused npm and clean up ctags build artifacts in Docker image#1120
chore: remove unused npm and clean up ctags build artifacts in Docker image#1120brendan-kellam wants to merge 1 commit intomainfrom
Conversation
… image The Node.js base image bundles npm with transitive dependencies (minimatch, tar, picomatch) that Trivy flags as vulnerable. Since we use Yarn exclusively, npm is never invoked at runtime. Removing it eliminates these false positives and reduces image size. Also clean up the ctags source tree left in /tmp after the install script runs (~109MB of build artifacts). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
@brendan-kellam your pull request is missing a changelog! |
|
Caution Review failedPull request was closed or merged during review No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (1)
WalkthroughThe Dockerfile was modified to remove npm and npx binaries along with associated node-gyp directories from the runner stage image, and to extend the ctags installation cleanup to remove temporary artifacts in Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~5 minutes 🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
The Node.js base image bundles npm with transitive dependencies
(minimatch, tar, picomatch) that Trivy flags as vulnerable. Since we
use Yarn exclusively, npm is never invoked at runtime. Removing it
eliminates these false positives and reduces image size.
Also clean up the ctags source tree left in /tmp after the install
script runs (~109MB of build artifacts).
Co-Authored-By: Claude Opus 4.6 (1M context) noreply@anthropic.com
Summary by CodeRabbit