Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Remove audit fix during docker build
Doing an audit fix during docker build makes the output more unpredictable. And we have dependabot in place to update the listed dependencies. It also will cause errors for dependencies that it can't fix. We are using an older version of bootstrap, which has a XSS issue in it. But it doesn't impact us based on our use of bootstrap. We can't upgrade bootstrap without significant work, so for now we want to ignore this issue. npm audit doesn't provide any way to ignore specific dependencies.
- Loading branch information