Skip to content

Security: fix eslint for devextreme-cli#1134

Merged
sjbur merged 3 commits into
DevExpress:masterfrom
sjbur:test-fix-eslint
May 27, 2026
Merged

Security: fix eslint for devextreme-cli#1134
sjbur merged 3 commits into
DevExpress:masterfrom
sjbur:test-fix-eslint

Conversation

@sjbur
Copy link
Copy Markdown
Contributor

@sjbur sjbur commented May 22, 2026

No description provided.

@sjbur sjbur requested a review from a team May 22, 2026 10:00
@sjbur sjbur force-pushed the test-fix-eslint branch from 811ef65 to b229aec Compare May 27, 2026 13:26
Comment thread .github/workflows/applications.yml Outdated

- name: ESLint Security Analysis
run: |
pnpm exec eslint \
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please use pnpm run. pnpm exec is vulnerable to supply chain attacks since it builds dependency tree on each run.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggestion applied

@sjbur sjbur merged commit d9a0db1 into DevExpress:master May 27, 2026
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants