From 03e1435f877e97ec991d63c0218081e78a14b035 Mon Sep 17 00:00:00 2001 From: shimoncohen Date: Mon, 10 Aug 2026 13:05:58 +0300 Subject: [PATCH] build: strip @zip.js/zip.js test fixture from image The @zip.js/zip.js package (prod dep via @cesium/engine) ships an encrypted zip test fixture (tests/data/lorem-encrypted.zip). Image scanners recurse into layers, hit it, and fail the scan reporting a password-protected archive. The fixture is not used at runtime. Remove the tests dir after npm prune so it never ships in the image. Co-Authored-By: Claude Opus 4.8 (1M context) --- Dockerfile | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Dockerfile b/Dockerfile index d0b011b..4d2187f 100644 --- a/Dockerfile +++ b/Dockerfile @@ -11,6 +11,10 @@ RUN npm run build # Strip dev dependencies so only runtime deps ship RUN npm prune --omit=dev +# @zip.js/zip.js (via @cesium/engine) ships an encrypted-zip test fixture that +# image scanners flag as password-protected; not used at runtime. +RUN rm -rf node_modules/@zip.js/zip.js/tests + FROM node:24-alpine AS production