Repository navigation

Harden pnpm installs against compromised releases - #24

Merged

silveltman merged 4 commits into

mainfrom

security/pnpm-trust-policy

Oct 2, 2026

Merged

Harden pnpm installs against compromised releases#24
silveltman merged 4 commits into
mainfrom
security/pnpm-trust-policy

Commits on Oct 2, 2026
- Make the release age strict and protect the Netlify install
  
  silveltman
  and
  claude
  committed
  d95c118
- Skip pnpmfiles everywhere and clarify the release age and trust settings
  
  silveltman
  and
  claude
  committed
  5464266
- Keep the token out of the read-only Validate checkout
  
  silveltman
  and
  claude
  committed
  8c582b8
- Keep the release token out of the checkout during the install
  
  silveltman
  and
  claude
  committed
  462df3a