medium10 pts · first answer countsdevsecopssupply-chainci-cd

Why CI uses npm ci

From a security angle, why should CI run `npm ci` instead of `npm install`?

A.It installs the exact lockfile versions and checks their hashesB.It skips downloading packages and uses only local copiesC.It scans every package for malware before installingD.It installs only packages with no known CVEs

Discussion 0

Join free to post in the discussion.

Why CI uses npm ci

Discussion 0

Related questions