chown directories to root, ensuring they are not writable by runners

This commit is contained in:
Thomas Hobson 2021-05-02 20:11:55 +12:00
parent 38ab15081e
commit 8b90c12c5c
No known key found for this signature in database
GPG key ID: 9F1FD9D87950DB6F
3 changed files with 780 additions and 4 deletions

View file

@ -5,6 +5,7 @@
"main": "src/index.js",
"dependencies": {
"body-parser": "^1.19.0",
"chownr": "^2.0.0",
"express": "^4.17.1",
"is-docker": "^2.1.1",
"js-yaml": "^4.0.0",
@ -18,6 +19,5 @@
"waitpid": "git+https://github.com/HexF/node-waitpid.git",
"yargs": "^16.2.0"
},
"license": "MIT"
}