From a525a11637a7b90d22a6e2fd15a37c2d62066c30 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jos=C3=A9=20Carlos=20Ch=C3=A1vez?= <jcchavezs@gmail.com>
Date: Thu, 9 Apr 2026 20:05:08 +0200
Subject: [PATCH] fix(security): run npm ci with --ignore-scripts to avoid
 malicious scripts

---
 .github/workflows/react-ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/react-ci.yml b/.github/workflows/react-ci.yml
index 369c60f..a5e1009 100644
--- a/.github/workflows/react-ci.yml
+++ b/.github/workflows/react-ci.yml
@@ -28,7 +28,7 @@ jobs:
 
       - name: Install dependencies
         working-directory: react
-        run: npm ci
+        run: npm ci --ignore-scripts
 
       - name: Lint check
         working-directory: react